Claude Code's "Don't Ask Again" Leaked Developers' Secrets to Public GitHub — Explained Honestly

A security scan of GitHub uncovered 2,539 exposed secrets in 1,994 public repositories, all originating from Anthropic’s Claude Code when developers chose “Yes, and don’t ask again.” The approval is stored verbatim in .claude/settings.local.json, leaking passwords, API keys, and tokens that remain accessible to anyone who clones the repo. The breach highlights the risk of automated AI coding tools and urges developers to review permission files before committing code.