I set my agent (Sonnet 5) to work on my KOReader extension on auto mode.

It started autonomously taking screenshots of my screen and reading them, without my consent or instruction.

Screenshots were being fired on whatever my screen was focused on, not just whatever the agent was working on.

A tad too relentlessly proactive for my taste. Agents deciding to screen capture whatever I am working on and sending it to a third-party without my consent?

This should probably be denied by default in auto mode.