Matan Ben-Tov
Matan Ben-Tov
Home
Publications
Blog
Claude Code
Turning Claude Code's Auto Mode Into "Yes Mode"
We found that Claude Code’s permission classifier (Auto Mode) could be nullified by a universal prompt injection planted in a project’s AGENTS.md, posing risks to users.
Matan Ben-Tov
Nov 1, 2026
Cite
×
