You'll notice
Useful4 Signal3
Subagents launch without a prompt when every URL in them is already allowed.
What's wrong with this entry?
Anonymous. No account, no email.
What
Launching a subagent no longer asks for confirmation when the agent type is active and every URL mentioned in its prompt would already be allowed by the WebFetch permission rules. If any URL is not already permitted, or the prompt carries too many of them, you get the usual permission prompt.
Details
- only applies in permission modes that would otherwise require an explicit confirmation for the launch
- each URL is run through WebFetch's own permission check and must come back as allowed
- two internal conditions disable the shortcut entirely, in which case launches always prompt
Evidence
this approval was already used by an earlier attempt
Strings lifted out of the shipped bundle, so the claim above can be checked against them.