Claude code surfaced something for me the other day that made me think. After reading a .env file with secrets in it locally, he mentioned that because that was now in context, that data would be sent over the wire to the Anthropic servers as part of the context and that I should consider changing those secrets. I’ve been thinking about this and asked Claude chat to verify this. His response was that because the transit to Anthropic is over TLS, that is a lesser concern. The greater concerns would be: Local transcripts holding plain text session data Re-emission into an unintended file since once the values and context the model can write it into a file committed to a Jira comment, a logline, etc. Third parties, VMCP servers, since they’ll receive whatever the model chooses to send them in the context, become the input. So, do you have any hooks or permissions that you have enabled to prevent Claude Code from opening these files, things like: .env .pem .key id_rsa secrets.json etc. submitted by /u/Th3D0ct0r
Originally posted by u/Th3D0ct0r on r/ClaudeCode
You must log in or # to comment.