I've used auto mode a few times and it's honestly pretty good, but I think this isn't just about auto mode, CC in particular has many other safeguards I've noticed even when not under auto mode (one that surprised me recently is a "risky command detected" that under bypass permissions stopped a tool call - the script had a RM /$var - had the var been empty somehow, it could've deleted the os).
I'm not surprised they are confident in promoting it to the default, it alongside the many other safety features in the tooling are honestly probably better than my exhausted review of every action.
Auto mode denies are also interesting, sometimes Claude wants to go off script to double check something (ie: waste time checking something slightly related that I know is not necessary/truth holds) and auto mode plainly stops it since it's off scope, nice bonus.
> the script had a RM /$var - had the var been empty somehow, it could've deleted the os
I had something almost identical that was missed by Auto Mode a couple of days ago, but thankfully not with the same failure mode. It was copying files into another directory, but $var was never set by the script Claude wrote. So instead of copying across the few files it had intended to, for a few minutes Claude was happily recursively copying from the root of the filesystem into this folder. Luckily the operation timed out while I was away from computer, and I came back to a horrified Claude stating "I need to be honest here".
Comments
I've used auto mode a few times and it's honestly pretty good, but I think this isn't just about auto mode, CC in particular has many other safeguards I've noticed even when not under auto mode (one that surprised me recently is a "risky command detected" that under bypass permissions stopped a tool call - the script had a RM /$var - had the var been empty somehow, it could've deleted the os).
I'm not surprised they are confident in promoting it to the default, it alongside the many other safety features in the tooling are honestly probably better than my exhausted review of every action.
Auto mode denies are also interesting, sometimes Claude wants to go off script to double check something (ie: waste time checking something slightly related that I know is not necessary/truth holds) and auto mode plainly stops it since it's off scope, nice bonus.
> the script had a RM /$var - had the var been empty somehow, it could've deleted the os
I had something almost identical that was missed by Auto Mode a couple of days ago, but thankfully not with the same failure mode. It was copying files into another directory, but $var was never set by the script Claude wrote. So instead of copying across the few files it had intended to, for a few minutes Claude was happily recursively copying from the root of the filesystem into this folder. Luckily the operation timed out while I was away from computer, and I came back to a horrified Claude stating "I need to be honest here".