Claude Code Secrets Exposed in 1,122 GitHub Copies — SkimNews
Get the Tech newsletter
Daily tech — startups, AI labs, chips, the launches that shape the next decade. Free.
- Claude Code can save an approved command word-for-word when a user selects “Yes, and don’t ask again,” preserving its complete text.
- Anthropic’s assistant includes the password or API key in the stored command, making the secret part of the saved text.
- GitHub repositories contain the saved commands in public, where anyone can read the embedded passwords and API keys.
- 1,122 public copies of the affected files were exposed on GitHub, quantifying the number of publicly readable files containing passwords and API keys.
Why it matters: Developers who relied on Claude Code’s “don’t ask again” choice retained passwords and API keys inside saved command text, while 1,122 public GitHub copies made those credentials readable by anyone. The direct consequence is exposure of authentication material for developers whose approved command text became public, turning a convenience setting into a credential leak.
Ask SkimNews
