Anthropic Makes Claude Code Auto Mode Default, Outperforming Manual Review
机器之心 · wechat · 2026-08-08
Anthropic announced that starting August 14, Auto Mode will become the default permission mode for Pro, Max, and Team users in Claude Code. The mode uses a separate classifier to review shell commands, successfully intercepting 89% of dangerous commands in tests, significantly outperforming the 14% caught by manual human review.
- Limitations of Manual Review: Data shows users blindly approved 97% of permission prompts, making manual oversight ineffective. Auto Mode not only enhances safety but also allows tasks to run unsupervised in the background for hours. Teams using Auto Mode saw a 25% increase in submitted PRs.
- Security & Defense: The Auto Mode classifier adds a defense layer against prompt injection attacks. In independent evaluations, all 720 attack attempts against Claude models failed; in contrast, GPT-5.6 Sol running in Codex's auto-review mode had an attack success rate of 5.83%.
- Interception Instances: The classifier successfully blocked outbound data exfiltration, destructive mass process terminations targeting training GPUs, and excessive cloud privilege escalations.
Additionally, Anthropic will no longer charge these subscription tiers for the extra tokens consumed by the Auto Mode classifier.
More from coding & agent
- Opus 5.5 + Three.js demo stuns with water physics, fish and blossoms — nikola_mr64990 · 2026-10-16
- Grok-built linear regression bot claims $508K PnL in 125 days on Polymarket — Roger_M_Taylor · 2026-10-16
- Karpathy's knowledge engine workflow: Claude Code turns raw notes into a self-updating wiki — nikola_mr64990 · 2026-10-16
- Sierra and Meta unveil Personal Agent Protocol with Zapier as launch partner — sujingshen · 2026-10-16
- ArcKit adds 102 AI-narrated short films for commands across 14 community overlays — mcraddock · 2026-10-16
- Personal agents live or die on chaining tasks, not single-task ability — sujingshen · 2026-10-16