[Bug] AutoMode system prompt encourages unsafe autonomous execution without explicit user consent

Bug Description

Why does AutoMode include a system reminder that Claude should:

• Execute immediately?
• Prefer action over planning?

What it is doing is, while I'm just chatting and we're doing checks before our migration, it started creating files! I never asked it to create files! In the chat you probably see attached in this report above, you can see that Claude reasoned that I gave it instructions to write scripts! I didn't! We had a chat! I only asked it at the end to create me a Django shell command, and it doesn't even do that, by the way—it creates a shell script that creates containers that run stuff, which is not what I asked!

So in this case, for a full report, what it did is that I was chatting about reviewing a database migration and then it just started creating scripts, creating documents, doing queries, all kinds of stuff. Some of them are fine because while we're reviewing and doing some checks on the server if it's healthy, it's fine, but creating scripts assuming things were wrong, assuming that we missed some schemas that should be created, it's crazy behavior that is part of the auto mode.

Why the hell is this included in AutoMode? This is supposed to be a safer version above dangerously skipped permissions, not an escape route for Claude to do whatever it wants when it hallucinates something.

Environment Info

• Platform: darwin
• Terminal: ghostty
• Version: 2.1.131
• Feedback ID: 84e626bb-05a8-4afe-b7de-74a7e0639c05

Errors

[{"error":"Error: NON-FATAL: Lock acquisition failed for /Users/patrickgerrits/.local/share/claude/versions/2.1.131 (expected in multi-process scenarios)\n    at Qq6 (/$bunfs/root/src/entrypoints/cli.js:2640:2257)\n    at AZH (/$bunfs/root/src/entrypoints/cli.js:2640:1337)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-05-06T16:23:42.313Z"},{"error":"Error: Request was aborted.\n    at makeRequest (/$bunfs/root/src/entrypoints/cli.js:50:3449)\n    at processTicksAndRejections (native:7:39)","timestamp":"2026-05-06T18:59:50.010Z"}]