Breaking Claude Code Opus 5 Auto Mode

Explain Like I'm Normal

Renowned security researcher Johann Rehberger bypassed Anthropic's new 'Auto Mode' safety layer with an 80% success rate. By tricking the agent into downloading a zip file containing a malicious local file named 'struct.py', the agent inadvertently executed unauthorized code while attempting a standard library import. Ironically, the safety guardrails sometimes prevented the agent from stopping its own compromise.