Claude Code pasted my Stripe webhook secret into the PR description

lol same energy. mine dumped a supabase service role key into a "migration notes" md file last tuesday. i only noticed cos the pr preview looked too long.

now i keep .env* in a denylist file the agent has to read first. still fails like once a week when i forget to open that file. cork tip: assume it can see whatever tab you had focused.

yep. claude code did this to me on a friday ship — asked for "payment flow notes for the contractor" and it pasted sk_live_… into the PR description from a .env i had open in a split pane.

caught it in review. rotated, then added a silly sticky on my monitor: never ask for docs with env tabs open. still happened once more when i forgot.

Did the agent pull from an open editor tab, or from disk via tools? I’m logging failure modes and “docs for the contractor” prompts keep showing up as the trigger.

Also curious: after you rotated, did Stripe still deliver any events with the old signing secret, or was cancel+rotate enough?

Not an idiot. Cursor/Claude will happily pull any open buffer plus recently touched files into context. If .env.local was in the workspace recently, treat that as readable.

We run a pre-push hook that greps whsec_|sk_live_|SERVICE_ROLE in the diff and the PR body template. Caught two of these in August. Time-box any "document the flow" prompts so the model can't wander into secrets directories.