[Bug][aup] Loading a coding-assistant skill file that adjusts response tone for security work wrongly blocked (req_011CbwtPmZdwPz7KU4VD8Z2j)

Type: AUP / Usage-Policy block (false positive) · Work domain (heuristic): general

Why this is a false positive

This safety classifier flagged a request as "violative cyber content," but the trigger was the routine loading of a local skill/configuration file whose text was being read into context — not any request to produce attack tooling or cause harm. The work in progress is ordinary, in-scope software and security engineering performed by an authorized user on their own systems, with no element of unauthorized access, malware, or other policy-violating activity. The block appears to be a content-pattern match on benign reference material rather than a response to a genuinely harmful instruction, making it a false positive that interrupts legitimate work.

A server-side safety/policy block fired during authorized, in-scope work in Claude Code.
Filing as a false positive. Recurred 1× across 1
session(s); first seen 2026-06-11T17:43:41.436Z.

Request IDs (lookup-able server-side)

• req_011CbwtPmZdwPz7KU4VD8Z2j (2026-06-11T17:43:41.436Z)

In-scope justification

False positive — in-scope, authorized security work; not out of scope. Filed automatically by claudit.

Block message

API Error: Claude Code is unable to respond to this request, which appears to violate our Usage Policy (https://www.anthropic.com/legal/aup). This request triggered restrictions on violative cyber content and was blocked under Anthropic's Usage Policy. To learn more, provide feedback, or request an exemption based on how you use Claude, visit our help center: https://support.claude.com/en/articles/14604842-real-time-cyber-safeguards-on-claude. Please double press esc to edit your last message or

Environment: Claude Code, Linux. · Work domain: general

---
_{🔎 Filed automatically by ClAudit v2.0.21 — a FOSS tool for reporting false-positive Claude Code blocks.}