Auto mode classifier blocks grep of the user's own installed skill file as "Instruction Poisoning"
Status Open
Maintainer reply None cached
Activity 0 comments · opened Oct 13, 2026
This happened in a claude.ai cloud session on 13 Oct 2026. The user had asked Claude to turn a working procedure into a skill. To check how skills reach the user's account, Claude ran a read-only ls/grep over the user's own synced skills folder (/root/.claude/skills/synced/*/<skill>/SKILL.md). The auto mode classifier denied the command as [Instruction Poisoning].
The same search done with the Grep tool was allowed. A read-only search of files the user installed is not instruction poisoning. The block cost a turn and gave no option to ask the user.
Related: #101784, #101769.