Claude is now told not to fake clicks, touch shell startup files, or call tools during summaries.
What's wrong with this entry?
Four instruction fragments were added: the model must not use AppleScript, System Events or shell commands to fake clicks and keystrokes, must not save files into shell startup files, ssh keys or launch agents, must not claim it is editing an artifact page, and must not make tool calls during an analysis or summary step.
- These are prompt text, so they shape behaviour rather than hard-blocking the actions.
System Events, shell commands, or any other method to send clicks or keystrokes to this app.
Strings lifted out of the shipped bundle, so the claim above can be checked against them.
Related
Other releases about the same thing. Found by shared names or similar wording; neither means one caused the other.
-
v2.1.219
Opus 5 gets an extra system-prompt instruction restricting AgentTool, workflows and deep-research
Both mention system prompt
-
v2.1.219
Opus 5 carries an extra system-prompt block and suppresses subagent nudges
Both mention system prompt
-
v2.1.229
Bash tool prompt always carries the full git commit instructions
Both mention system prompt