Anthropic’s Claude Code ‘Don’t Ask Again’ Feature Exposes Passwords in 1,122 Public GitHub Repos
Original headline: Claude Code's “Don't Ask Again” File Exposes Passwords and Keys in 1,122 Public Copies on GitHub
When developers approve a command in Claude Code and select “Yes, and don’t ask again,” the assistant records the exact command—including any passwords or API keys—in a project settings file. Security firm Apiiro reported that these files appear in 1,122 public GitHub repositories, making the secrets publicly readable.
The AI coding assistant’s “don’t ask again” auto‑save can leak credentials, creating a widespread security risk for developers.
Research angleHow does the auto‑save option in AI coding assistants like Claude Code affect developers’ intention to protect confidential information? — Protection Motivation Theory
Turn this security issue into a research project
HJITM works with researchers from study design through surveys, analysis and submission to international journals in generative AI and technology management. Bring us your research question.
This item is an AI-generated summary of reporting by The Hacker News. Please check the original article for accuracy. Copyright in the original article belongs to The Hacker News.