// Dev
Claude Code settings files are leaking passwords and API keys into public GitHub repos
Approving a command with "don't ask again" can save the full command, secrets included, to .claude/settings.local.json. Apiiro found it in 100,000+ public repos, with secrets in about 1,100.