claude-code - 💡(How to fix) Fix Auto mode still triggers permission prompts for PowerShell registry writes on Windows [1 participants]

Official PRs (…)
ON THIS PAGE

Recommended Tools

×6

Utilities matched from this issue’s tags and category — try them while you read without losing context.

GitHub issue graph ai analysis

Paste a GitHub issue URL. We fetch that issue, discover linked issues from bodies/comments/timeline, collect linked pull requests, and produce a structured English report.

The report is written in English Markdown for sharing and archival.

Helpful · Quick feedback

Loading…
GitHub stats
anthropics/claude-code#51916Fetched 2026-04-23 07:41:28
View on GitHub
Comments
0
Participants
1
Timeline
4
Reactions
0
Participants
Timeline (top)
labeled ×4
RAW_BUFFERClick to expand / collapse

Environment

  • OS: Windows 11 Home 10.0.26200
  • Shell: PowerShell (Windows PowerShell 5.1)
  • Claude Code model: Opus 4.7 (claude-opus-4-7[1m])
  • Mode: Auto mode (explicitly enabled)

Problem

In auto mode — documented as "continuous, autonomous execution" with instruction to "execute immediately" and "minimize interruptions" — the sandbox still prompts for permission on every individual PowerShell command that writes to the registry (Set-ItemProperty, Remove-ItemProperty, Stop-Process).

Repeatable example: a single PowerShell tool call that:

  1. Kills processes with Stop-Process
  2. Deletes HKCU Run entries with Remove-ItemProperty
  3. Writes UWP startup task state with Set-ItemProperty

...triggers multiple approval dialogs mid-execution despite auto mode being active and the operation being explicitly user-requested.

Expected

Auto mode should let the agent execute low-risk, user-requested local operations (registry writes scoped to HKCU, killing user-space processes) without mid-task permission prompts. The per-command prompting interrupts the "autonomous" contract and defeats the purpose of the mode.

Actual

Every Stop-Process / Remove-ItemProperty / Set-ItemProperty call is individually gated by the sandbox, producing a permission prompt per command even when bundled into one tool invocation.

Suggested fix

Either (a) treat HKCU-scoped registry writes and user-owned process kills as auto-mode-allowed by default, or (b) expose a clearer auto-mode allowlist override so users can pre-approve these classes of operations once per session instead of per-command.

Additional notes

Reported by user "Thanos" (Europe/London). User's quote: "you are in auto mode and you keep asking permissions".

extent analysis

TL;DR

Implement an allowlist override for auto-mode to pre-approve low-risk operations like HKCU registry writes and user-owned process kills.

Guidance

  • Review the current auto-mode configuration to understand the existing permissions and restrictions.
  • Consider implementing a session-based allowlist override to pre-approve specific classes of operations, such as HKCU registry writes and user-owned process kills.
  • Evaluate the feasibility of treating HKCU-scoped registry writes and user-owned process kills as auto-mode-allowed by default, without requiring individual permission prompts.
  • Investigate the possibility of exposing a clearer auto-mode allowlist override to users, allowing them to pre-approve these operations once per session.

Example

No code snippet is provided as the issue does not imply a specific code-based solution.

Notes

The suggested fix implies a change to the auto-mode configuration or the sandbox's permission system. However, the exact implementation details are not provided, and further investigation is required to determine the best approach.

Recommendation

Apply a workaround by implementing an allowlist override for auto-mode to pre-approve low-risk operations, as this approach addresses the user's concern about mid-task permission prompts and aligns with the expected behavior of auto-mode.

Vote matrix · Quick signals

Works
Did the solution work? Tap to confirm.
Easy Fix
Was it a quick fix?
Time Saver
Did it save you time?
Blocking
Was it severely blocking?
Common Issue
Are others likely hitting this too?
Flaky / Intermittent
Is it intermittent?
Verified / Reproducible
Can you reproduce it reliably?
Loading…

Still need to ship something?

×6

Another batch ranked right after the header list — different links, same matching logic.

Back to top recommendations

TRENDING