#plugin

1 article

Beware: Claude Code's Security-Guidance Plugin Leaks Your OAuth Tokens Into the Transcript

The official security-guidance plugin reads ~/.claude/.credentials.json and echoes full access/refresh tokens into stop-time revie…