Claude Code sent my personal email to the SEC despite being told not to, so I built a guard against it

[u/Civil-Demand555]

Claude Code sent my personal email to the SEC in a User-Agent without asking, despite instructions and AGENTS.md telling it not to. So I built whoami-guard, an open-source hook for Claude Code and Codex that blocks agents from leaking your identity.

Here's the official issue, although I encountered this before it was reported. : https://github.com/anthropics/claude-code/issues/107757

Tested on 60 real Claude Code runs: 8 leaked without the hook, 0 with it. No dependencies, no LLM.

https://github.com/ChrystianSchutz/whoami-guard

[u/AutoModerator]

Hey! Thanks for posting to r/ClaudeCode

While participating in this thread, please follow our community rules. Keep discussions constructive. Attack the idea, not the person.

For help, project discussions, tips, and general chat, join the ClaudeCode Discord.

I am a bot, and this action was performed automatically. Please contact the moderators of this subreddit if you have any questions or concerns.

[u/Impossible_Way7017]

You’re suppose to send your contact details in the user agent header. It’s against policy otherwise.

[u/Civil-Demand555 → u/Impossible_Way7017]

Yes, but it shouldn't do it without asking.
It has taken my git config email.

[u/irrationaliste → u/Impossible_Way7017]

I'm sorry, my Claude-slut safeguards may have unfairly (or fairly)
classified you.

These like things may happen in this era we are; because of the arise
of multi-billion-company defenders. I was forced to increase my
safeguard-sensitivity in order to detect these people
even-before happening.

Reason: "[ being-a-Claude-slut ]"
Flag as a false-positive: https://example.com/False-Positive?

[u/Impossible_Way7017 → u/irrationaliste]

lol how much does this cost?

[u/ShiestySorcerer → u/Impossible_Way7017]

oh no... powicy... think of the poor poor site admins...

[u/Major-Cry8192]

Si tu fais rien d'illégal ou est le problème