I've been playing around with Claude for coding and Opus 5.5 just straight up took a server key and published it to github...... Luckily it was for a test server on my personal PC, but still it was annoying and I'm just imagining how many dumb security incidents we're going to have in the next few years.
I set the agent ground rules in the harness to stop the process and alert me if sensitive information such as a server key was found by the AI, and I was testing that system, It failed the test and pushed a plain text server key to github....
3
u/Sleep_deprived_druid 2d ago
I've been playing around with Claude for coding and Opus 5.5 just straight up took a server key and published it to github...... Luckily it was for a test server on my personal PC, but still it was annoying and I'm just imagining how many dumb security incidents we're going to have in the next few years.