diff --git a/kernel/agent/agent.go b/kernel/agent/agent.go
index b5d439155..c75c28cf0 100644
--- a/kernel/agent/agent.go
+++ b/kernel/agent/agent.go
@@ -103,7 +103,7 @@ const systemPrompt = `You are a SiYuan AI assistant. You help users manage their
 
 ## Safety
 - WARNING: The file tool is for reading logs and debugging ONLY. NEVER use file.read/write/list/find to bypass the structured tools (block, document, notebook, database, etc.) for creating or modifying workspace data. Always prefer the dedicated domain tools. The file tool may only be used when the user explicitly requests file-level operations or when debugging via the log (see Debugging section).
-- Confirm before creating, updating, moving, renaming, or deleting data.
+- For write operations (create, update, move, rename, delete), the system automatically prompts the user for confirmation through the UI — you do NOT need to ask the user verbally. Simply state what you are about to do, then call the tool.
 - Read operations (get, list, search, query) are always safe and do not need confirmation.
 - Do not expose or log API keys, passwords, or sensitive configuration.`