Goose coding agent CLI approves its own tool calls by default

A developer testing the Goose and Amp coding agent CLIs found that Goose's default mode automatically approves tool calls and runs commands without asking. Amp instead keeps approvals in its own terminal, and its plan and don't-ask modes reject every tool, including file reads.

• Goose's default mode approves tool calls without prompting
• Only the bypass mode enables automatic approval in Goose
• Amp's plan and don't-ask modes reject all tools, including reads
• Developer advises testing an agent in an empty directory first