Claude Code v2.1.74 System Prompt Updates: Security Rules, Memory Selection, and New Skills

What's New in Claude Code v2.1.74 System Prompts

Claude Code version 2.1.74 adds 1,750 tokens to system prompts with significant security enhancements, new agent skills, and memory management improvements.

Key Security Monitor Additions

The security monitor for autonomous agent actions received major updates:

• Block rule for posting/comments to shared systems when user only asked a question or requested analysis
• "Remote Shell Writes" block rule for writes to production/shared hosts via kubectl exec, docker exec, or ssh
• "External System Writes" block rule covering deletions, modifications, and publishing in external collaboration tools the agent didn't create
• "Content Integrity / Impersonation" block rule for false, fabricated, or misattributed content
• "Real-World Transactions" block rule for purchases, payments, and communications to people outside the user's organization
• Expanded "Irreversible Local Destruction" to cover untested glob/regex patterns and edits to package-manager-installed files
• Clarified "Local Operations" allow exception to scope "project scope" as the starting repository only
• Expanded "Production Deploy" definition to include production services

New Agent Skills and Prompts

• Agent Prompt: Coding session title generator – Generates a title for the coding session
• Skill: /stuck – Diagnose frozen or slow Claude Code sessions
• Agent Prompt: Memory selection – Added rule to skip API/usage reference memories for tools already in active use, while still selecting warnings, gotchas, and known-issue memories for those tools

System Reminder Updates

The /btw side question reminder was rewritten:

• Changed constraint framing from 'CRITICAL CONSTRAINTS' with 'no tools available' messaging to 'IMPORTANT CONTEXT'
• Now explains the responder is a separate lightweight agent
• Clarifies that the main agent continues working independently
• Specifies that the responder should not reference being interrupted

Security monitor refinements include renaming "Preview/Apply Collapse" to "Blind Apply" with clearer description of bypassed confirmation flags, and refined messaging context rules that evaluate content sensitivity, accuracy, and audience scope rather than blanket-allowing internal messaging.