Dangerous mode
Normally an agent asks before doing something risky — running a command, editing a file. Dangerous mode switches those questions off, so the agent works without stopping.
1/3Normally the agent stops and asks before running a command.
Turn it on
Open the agent card’s ⋯ menu and choose Enable dangerous mode. An amber triangle appears in the card’s header. The setting is per card — it never applies to all agents at once. Disable dangerous mode in the same place turns it off.
- Claude Code, OpenCode 2.x, MiMo Code and PenguinHarness switch instantly, both ways: the very next approval follows the toggle — no restart, same conversation.
- Every other agent reads the mode when it starts. NeuroSquad offers Restart now: the agent restarts and continues the same conversation. Choose Later to apply it at its next start.
In dangerous mode the agent can delete files and run any command without asking. Use it on a project you have backed up, ideally together with an isolated worktree and a budget.
Pi doesn’t offer this mode — it never asks before running a tool in the first place. Plain terminals don’t need it either.