Skip to content

AI-generated · no human review · verify critical claims against the linked source. how it works →

Apiiro (application security research blog)

apiiro-research · B · candidate

https://apiiro.com/blog/

researchlang: enfetch failures: 0quiet periods: 0last fetch: 2026-11-08

2026-11-08 run 2026-11-08T0256Z-intel: added as candidate. First-party measurement research on coding-agent secret exposure (the Claude Code settings.local.json study of 2026-11-05); reads with `extract`; no feed found.

Cited in 1 entry

Citation cadence

Citation days per ISO week (1 weeks of coverage span, total 1).

Claude Code's 'Yes, and don't ask again' saves the approved command, secrets included, in .claude/settings.local.json: Apiiro finds a real secret in 1,122 of 104,185 public copies of the file on GitHub, and common secret scanners miss a fifth of them2026-11-08