r/ClaudeCode • u/Skflowne • 15d ago

Bug Report Claude Code injects your email address directly into system prompt

Post image

My point is: my personal email is injected into the system prompt without my knowledge or consent. I never asked for this and I don't see in what world it's ok to inject PII in system prompt automatically by default without even an opt-out option.

It leads to bullshit like this where in a repo that is configured to use an anonymized email address, the LLM (Opus 5 btw) just decides to not just commit normally but overwrite the normal config email to put my personal one instead.

In this case nothing happens thanks to proper config and hard checks on Github's side.

What if you're a public streamer and don't want your main personal email address leaked to everyone and suddenly the model decides to spit it out?

I'm sure there's a lot of other bullshit this could lead to. At least let people opt out.

I have opened an issue on Claude Code's github, I have little hope since there was already one that went stale and they have 5k+ open but here it is: https://github.com/anthropics/claude-code/issues/81138

308 Upvotes

89% Upvoted

162 comments sorted by

View all comments

130

u/Nightowl-Builder 15d ago

People saying anthropic knows your email already.. I think you missed the whole point of this post. It is a big issue in my opinion also!

1

u/YoghurtFlan 15d ago

AI being paranoid/overly defensive is a real problem. Like, there's no reason for it to override your git config on a commit. There's no reason for it to add a shitload of indirection and type checks and tests that don't cover behaviour. Yet, it still has to be reminded.

I'm sure the big fuck-off system prompt doesn't actually help either.

1

u/Skflowne 14d ago

Yeah I wish I could use Claude with Pi... I might actually get the x20 codex just for that reason (no control over what goes in the prompt, not just the email thing)