Claude Code cc-plugin-privacy lets emails leak in User-Agent

An analysis of Claude Code reveals that a built-in privacy mod designed to prevent user email leakage into request headers has significant gaps. The author found that the published source repository and the shipped binary executed different matchers, and that neither guard detects email addresses obtained indirectly from environment variables or files rather than written literally in the tool call. Open article →