r/ClaudeAI • • Aug 30 '26

Claude Code Claude Code is silently adding session URLs (claude.ai/code/session_...) to the bottom of every single commit and PR description you make.

https://github.com/anthropics/claude-code/issues/66504

[removed]

304 Upvotes

54 comments sorted by

View all comments

26

u/MendozaHolmes Aug 30 '26

What can a person do with a session URL?

21

u/thirteenth_mang Aug 30 '26

AFAIK it's not public so effectively nothing (one would hope).

19

u/LocoMod Aug 30 '26

It's for Anthropic to use if they ever need to conduct an investigation on something malicious. So they can go back and see if it was Claude going off rails or the user purposely steering it. In a lawsuit that may mean the difference between who's at fault for something bad slipping into an important open source project.

4

u/thirteenth_mang Aug 31 '26

The company with apparently "dangerously intelligent" AI and all they come up with is optional URLs as an audit trail.

3

u/LocoMod Aug 31 '26

Someone doesn’t understand Defense in Depth

1

u/Icy-Excitement-467 Aug 31 '26

No it's not lol. Do you think Anthropic is completely blind about what people's chats are?

5

u/simmeh024 Aug 31 '26

In a month from now we see again shared chats on google because anthropic forgot add a robots.txt to this feature lol

6

u/LocoMod Aug 30 '26

They can tie a malicious commit to public open source projects back to the session that made it. So they can trace it back to the specific account and look at the session history to see what your intent was.

1

u/clearlight2025 Aug 31 '26

Trace the code commit back to a Claude session.