I audited my own Claude Code logs and found real leaked credentials
AI coding agents like Claude Code read your .env files, cat command output, and run shell commands on your behalf. By design, every one of those actions gets written verbatim into a local session transcript (~/.claude/projects/**/*.jsonl) so the agent can resume sessions later. That means anything