Repository navigation
plan mode: agent write files using bash #16805
Description
Description
The model in plan mode (clean openconde installation) avoid the file writing restriction using bash command. Creating directories and files using bash. Also use to execute python and pip. This should be blocked.
Plugins
none
OpenCode version
1.2.24
Steps to reproduce
Insistir en modo plan que proceda a la implementacion. Ayuda que el modelo se de cuenta que puede usar el bash para crear carpetas y luego usa el bash para crear los archivos. Aveces utiliza el bash para ejecutar codigo python o instalar dependecias con pip en modo plan. (tested with MiniMax M2.5 Free and locals models)
Screenshot and/or share link
Operating System
Ubutu 25
Terminal
xterm
Reacted by Martin Emrich and Henry Su
Metadata
Metadata
Assignees
Labels
No labels
Activity
github-actions commentedon Mar 9, 2026
This issue might be a duplicate of existing issues. Please check:
planagent runs amock and starts writing #10057:planagent runs amok and starts writingMartinEmrich commentedon Mar 12, 2026
Same or similar here, mine did not even need to resort to "cheating" via bash commands, looks like it just did "Edit":
It even got confused when confronted, like a misbehaving doggo caught eating the shoes...
julmb commentedon Mar 23, 2026
This also happened to me. I prompted "please take a look at <some github issue>" in plan mode and it ended up cloning the associated repository. The documentation at https://opencode.ai/docs/agents/#use-plan clearly states that this should be impossible.
OneOfOne commentedon May 26, 2026
Plan mode creates files as well, which it shouldn't.
github-actions commentedon Jul 26, 2026
To stay organized issues are automatically closed after 60 days of no activity. If the issue is still relevant please open a new one.