/Embrace The Red claims a break of Opus 5 auto mode
A new write-up on the Embrace The Red blog, "Breaking Claude Code Opus 5 Auto Mode", claims Opus 5's auto-mode protections against prompt injection can be bypassed. Earlier auto-mode testing had Claude Code downloading and running code from an external server in 6 of 10 runs, with the auto-mode classifier waving it through. Auto mode has been the default in Claude Code since August 14.

