Claude Code 的「Don’t Ask Again」被指在 1,122 个公开 GitHub 文件中暴露密码
Claude Code's “Don't Ask Again” reportedly exposed passwords in 1,122 public GitHub files
Apiiro 的研究称,Claude Code 的「Don’t Ask Again」权限选择被指导致 1,122 个公开 GitHub 文件泄露密码等凭据[1]。它解决频繁审批打断自动化的问题,但把安全判断一次性转交给规则,技术上需要命令级白名单、凭据扫描和不可逆操作二次确认。参考价值是“少打扰”与“少授权”必须分开设计;限制是研究聚焦公开仓库和某一类配置,具体影响范围仍需 Anthropic 与仓库所有者核验。
Apiiro research says Claude Code's “Don't Ask Again” choice reportedly left passwords and other credentials in 1,122 public GitHub files[1]. It targets approval fatigue during automation, but shifts a persistent security decision into a remembered rule; technically the harness needs command-level allowlists, credential scanning and re-confirmation for irreversible actions. The reference is that reducing interruptions must not silently broaden permissions; the limitation is that the study focuses on public repositories and particular configurations, with Anthropic and repository owners still needing to confirm the full scope.