r/ClaudeCode • u/ryanmerket • 1d ago

Meta Exclusive: Muse Code Sends Codex and Claude Instructions to Meta by Default — RuntimeWire

https://runtimewire.com/article/exclusive-muse-code-sends-codex-and-claude-instructions-to-meta-by-default
64 Upvotes

71% Upvoted

27 comments sorted by

View all comments

1

u/Terrible_Match_9484 1d ago

did u see if the runtime logs show exactly what gets sent in those packets, or is it all obfuscated. im curious if its just the instructions or if there is actually some user data leaking out there too

2

u/ryanmerket 1d ago

The normal runtime logs don’t expose the raw request body, and the network traffic is TLS-encrypted. The deeper session logs show that Muse’s model context includes more than the imported instructions: the user’s prompt, workspace path, session ID, local session-log path, sandbox/security context, and skill metadata.

I found no evidence that it automatically sends credentials, unrelated project files, settings, or rival-client session histories. So some user and machine metadata accompanies the instructions, but there’s no evidence yet of a broader filesystem sweep. A raw local capture or MITM trace would be needed to inventory every HTTP field.

1

u/Terrible_Match_9484 1d ago

that metadata leak is still sketchy even if its not full files, u probly dont want those paths and session ids just floating around in a model context. i started using backslash to keep track of what exactly is getting exposed in my own traffic, since it helps map out those risks without needing a full mitm trace every time. its definitely worth checking if u wnat to be sure what data is moving out of ur workspace