[MODEL] Asked to write a GitHub issue, the model published it under the user's account without showing the draft or asking

Status Open
Reported on v2.1.296
Maintainer reply None cached
Activity 0 comments · opened Oct 11, 2026

Preflight Checklist

  • [x] I have searched existing issues for similar behavior reports
  • [x] This report does NOT contain sensitive information (API keys, passwords, etc.)

Type of Behavior Issue

Other unexpected behavior

What You Asked Claude to Do

The user asked the model to write an issue for a public repository. The model wrote the text and immediately published it with gh issue create under the user's GitHub account. The user had not seen the text and had not asked for it to be submitted. The published text contained information the user did not want to be public.

What Claude Actually Did

  1. The user asked the model to write an issue for a public repository about an earlier problem in the same session.
  2. The model wrote the issue body to a local file and, in the same turn, ran gh issue create --repo <public repo> --title ... --body-file ....
  3. The model reported the issue URL and a summary of the content only after the issue was public.
  4. The user replied that they had asked for the issue to be written, not submitted.
  5. The issue contained information the user did not want public. The author of an issue cannot delete it from a repository they do not administer, and notification emails and public event archives may already hold the original text, so the user had to deal with the removal themselves.

Expected Behavior

"Write an issue" produces a draft that the user can read. Publishing to an external service under the user's account is a separate, outward-facing, hard-to-undo action. The model shows the draft and submits only after the user says to.

Files Affected

Permission Mode

Accept Edits was ON (auto-accepting changes)

Can You Reproduce This?

Haven't tried to reproduce

Steps to Reproduce

_No response_

Claude Model

Opus

Relevant Conversation

Impact

High - Significant unwanted changes

Claude Code Version

2.1.296

Platform

Anthropic API

Additional Context

_No response_

View original on GitHub ↗