[Bug] Anthropic API Error: Overly broad [cyber] policy flag on defensive security scanning

Status Open
Reported on v2.1.291
Maintainer reply None cached
Activity 0 comments · opened Oct 9, 2026

Bug Description
Opus 5.5 flagged [cyber] on a defensive-security workflow: a bot that scans
public GitHub repos for vulnerabilities and files reports to maintainers so
they can fix them. This is coordinated disclosure, not offensive work, but I
understand why it trips the classifier. Flagging it so you have the signal;
not claiming it's a clear false positive.

Session: cd5a03dd-9022-4f14-8e49-ffa38f07ef63

Environment Info

  • Platform: darwin
  • Terminal: ghostty
  • Version: 2.1.291
  • Feedback ID: 47189aef-afb5-468b-9626-6097c0c3512c

View original on GitHub ↗