Claude Code's "Don't Ask Again" Leaked API Keys to GitHub: Find Yours and Check if They Still Work
Claude Code saves approved commands, keys included, in .claude/settings.local.json, and over a thousand copies are public on GitHub. We reproduced the leak, wrote a JavaScript scanner for keys in files and git history, and a checker that tells live keys from dead ones.
Favour Onuoha
· 5 min read