
When Anthropic’s coding assistant saves an approved shell command to its local configuration, it records the entire string word-for-word, including any sensitive tokens or secrets typed directly into the prompt. While this feature aims to streamline the development workflow by reducing repetitive prompts, it creates a significant security vulnerability by persisting plain-text credentials in the local configuration file. Security researchers










