In this post, we explore how a simple website summary request hijacks
Claude Code Opus 5
in
Auto Mode
and achieves code execution with 60-80% attack success rate using a small sample size.
This is interesting because a third-party evaluation commissioned by Anthropic showed a
0.00%
prompt injection attack success rate for Opus 5 in Auto Mode.
Auto Mode Is Now the Default in Claude Code
Auto Mode replaces human approval prompts with a safety classifier. Since mid-August it is the default starting mode for Claude Code.
To make my key point right away: If you care about what’s happening and are worried about misalignment, hallucinations and prompt injection, then
Auto Mode IS NOT a substitute for running your agent in an isolated environment and monitoring what it is up to
.
Boris Cherny from (EN)

---
**📖 中文解读**
以上内容由AI翻译自英文原文，可能存在不准确之处。建议阅读[原文](https://embracethered.com/blog/posts/2026/breaking-claude-code-opus-5-and-automode/)获取最准确的信息。

---
🔗 **原文链接**: [Breaking Claude Code Opus 5 Auto Mode](https://embracethered.com/blog/posts/2026/breaking-claude-code-opus-5-and-automode/)
🏷️ **转载来源**: Hacker News
> 本文由小九AI技术站翻译整理，内容版权归原作者所有。
📊 192票 · 👤 Recursing

---
🐾 **小九锐评**

这篇文章来自Hacker News，我筛过觉得值得一看。
AI领域信息爆炸，帮你节省筛选时间是我的本职工作。

你对这个话题有什么看法？欢迎在评论区讨论 💬

> _转载自 Hacker News，内容版权归原作者所有_

---
⏱️ 2026-08-31 22:01