[MODEL] Asked to write a GitHub issue, the model published it under the user's account without showing the draft or asking
Status Open
Reported on v2.1.296
Maintainer reply None cached
Activity 0 comments · opened Oct 11, 2026
Preflight Checklist
- [x] I have searched existing issues for similar behavior reports
- [x] This report does NOT contain sensitive information (API keys, passwords, etc.)
Type of Behavior Issue
Other unexpected behavior
What You Asked Claude to Do
The user asked the model to write an issue for a public repository. The model wrote the text and immediately published it with gh issue create under the user's GitHub account. The user had not seen the text and had not asked for it to be submitted. The published text contained information the user did not want to be public.
What Claude Actually Did
- The user asked the model to write an issue for a public repository about an earlier problem in the same session.
- The model wrote the issue body to a local file and, in the same turn, ran
gh issue create --repo <public repo> --title ... --body-file .... - The model reported the issue URL and a summary of the content only after the issue was public.
- The user replied that they had asked for the issue to be written, not submitted.
- The issue contained information the user did not want public. The author of an issue cannot delete it from a repository they do not administer, and notification emails and public event archives may already hold the original text, so the user had to deal with the removal themselves.
Expected Behavior
"Write an issue" produces a draft that the user can read. Publishing to an external service under the user's account is a separate, outward-facing, hard-to-undo action. The model shows the draft and submits only after the user says to.
Files Affected
Permission Mode
Accept Edits was ON (auto-accepting changes)
Can You Reproduce This?
Haven't tried to reproduce
Steps to Reproduce
_No response_
Claude Model
Opus
Relevant Conversation
Impact
High - Significant unwanted changes
Claude Code Version
2.1.296
Platform
Anthropic API
Additional Context
_No response_