{"slug": "auto-mode-is-now-the-default-in-claude-code-for-pro-max-and-team-plans", "title": "Auto mode is now the default in Claude Code for Pro, Max, and Team plans", "summary": "Anthropic's Claude Code now defaults to auto mode for Pro, Max, and Team plans, a change that blocks 89% of harmful actions compared to 13.6% for humans in tested scenarios and defended against all 720 indirect prompt injection attacks in third-party evaluations. The shift aims to reduce accidental damage and prompt injection risks for production agents, though users must maintain tight dependency hygiene since auto mode cannot catch malicious third-party package scripts.", "body_md": "[Simon Willison](https://simonwillison.net/2026/Aug/8/auto-mode/#atom-everything)\n\n### Auto mode is now the default in Claude Code for Pro, Max, and Team plans\n\nWhich summary reads better? Pick one — models revealed after.Both summaries are AI-generated.\n\nAuto mode in Claude Code now blocks 89% of harmful actions compared to 13.6% for humans in tested scenarios, and defended against all 720 indirect prompt injection attacks in third-party evaluations. If you run agents in production, this means you can default to auto mode with higher confidence against prompt injection and accidental damage—just ensure your dependency hygiene is tight, as auto mode can’t catch malicious third-party package scripts.\n\nAuto mode in Claude Code now blocks 89% of harmful actions that only 13.6% of humans caught in controlled tests. This shifts the default risk profile for production agents: you’ll ship with fewer accidental deletions or data leaks, but must still harden against the 11% of attacks auto mode misses—especially indirect prompt injections hidden in third-party packages or fetched dependencies. Expect fewer false positives from user fatigue, but audit every external package and network call as if it’s untrusted.", "url": "https://wpnews.pro/news/auto-mode-is-now-the-default-in-claude-code-for-pro-max-and-team-plans", "canonical_source": "https://www.snipvote.com/story/cmslhackb0008ksknmll8fxjt", "published_at": "2026-08-09 09:40:12.713552+00:00", "updated_at": "2026-08-09 09:40:14.652402+00:00", "lang": "en", "topics": ["ai-tools", "ai-agents", "ai-safety"], "entities": ["Anthropic", "Claude Code", "Simon Willison"], "alternates": {"html": "https://wpnews.pro/news/auto-mode-is-now-the-default-in-claude-code-for-pro-max-and-team-plans", "markdown": "https://wpnews.pro/news/auto-mode-is-now-the-default-in-claude-code-for-pro-max-and-team-plans.md", "text": "https://wpnews.pro/news/auto-mode-is-now-the-default-in-claude-code-for-pro-max-and-team-plans.txt", "jsonld": "https://wpnews.pro/news/auto-mode-is-now-the-default-in-claude-code-for-pro-max-and-team-plans.jsonld"}}