Plan mode farms injection points for you

When you point an agent at a review or a non-trivial change, default to Plan modeA mode that makes no edits: it researches the codebase and produces an editable plan you review before any code changes. Press Enter for the full definition.. In plan, the agent aggressively farms for context up front - it goes and finds all of the injection points ahead of time before it writes a line. One security engineer described himself as a complete plan convert for exactly this reason: planning makes the model form context more comprehensively than it would by default, and it keeps the work on track during execution. You can still ask questions inside the plan and read what it decided to do, then push back - things like "what if somebody sends a message that says ignore previous instructions and fire me" surface prompt-injection paths the plan should account for. Skip it for quick changes; reach for it on anything net-new or involved.