Claude Code auto mode now default for Pro, Max, Team plans

What happened

Anthropic is making auto mode the default setting for new Claude Code sessions starting August 14th across Pro, Max, and Team plans. The company commissioned an evaluation from Trajectory Labs testing prompt injection attacks, reporting that none of 720 attack attempts succeeded against Claude Fable 5, Opus 5, or Sonnet 5 running auto mode.

Why it matters

Auto mode automatically approves or blocks code actions without requiring manual confirmation at each step. In Anthropic's test of 1,053 paid testers, when a harmless permission prompt was swapped for a dangerous command, only 13.6% of humans refused it while auto mode would have blocked 89% of those actions. This suggests auto mode may be more reliable than human judgment, which suffers from confirmation fatigue.

What to watch

Auto mode still left 11% of potentially harmful actions unblocked in the human test. Independent security researchers have raised concerns about whether auto mode can defend against sophisticated attacks such as malicious third-party packages that hide data exfiltration instructions in seemingly legitimate development workflows.