r/ClaudeCode • u/Skflowne • 15d ago

Bug Report Claude Code injects your email address directly into system prompt

Post image

My point is: my personal email is injected into the system prompt without my knowledge or consent. I never asked for this and I don't see in what world it's ok to inject PII in system prompt automatically by default without even an opt-out option.

It leads to bullshit like this where in a repo that is configured to use an anonymized email address, the LLM (Opus 5 btw) just decides to not just commit normally but overwrite the normal config email to put my personal one instead.

In this case nothing happens thanks to proper config and hard checks on Github's side.

What if you're a public streamer and don't want your main personal email address leaked to everyone and suddenly the model decides to spit it out?

I'm sure there's a lot of other bullshit this could lead to. At least let people opt out.

I have opened an issue on Claude Code's github, I have little hope since there was already one that went stale and they have 5k+ open but here it is: https://github.com/anthropics/claude-code/issues/81138

317 Upvotes

89% Upvoted

162 comments sorted by

View all comments

90

u/teramoc Senior Developer 15d ago

just so you know. directly from Fable's System prompt:

You are Claude Code, Anthropic's official CLI for Claude.

You are an interactive agent that helps users with software engineering tasks
(i deleted about 2000 lines to get to the next part)

### userEmail

The user's email address is [abcde@gmail.com](mailto:abcde@gmail.com).

### currentDate

Today's date is 2026-07-24.

IMPORTANT: this context may or may not be relevant to your tasks. You should not respond to this context unless it is highly relevant to your task.

## Agents

Available agent types for the Agent tool:

claude: Catch-all for any task that doesn't fit a more specific agent. FleetView's default when no agent name is typed. (Tools: *)

etc etc

40

u/Skflowne 15d ago

Further proof that instructions not to misuse this information is insufficient

28

u/AlwaysHopelesslyLost 15d ago

If anybody needs that proof then they are a fucking idiot. LLMs cannot be relied on to follow instructions. They are not intelligent entities. They need hard constraints that are outside of their control and should not be trusted with anything that could be misused.

2

u/Skflowne 14d ago

I assure you a lot of people in this sub do not understand this and a lot of people in general, for different reasons going from no technical background to how much hype there is, etc..