Does a secret leave your machine through Claude Code? An end-to-end leak test bench.

You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Branch: main

main

Branches Tags

${ item.name }

Create tag ${ searchTerm }

Create branch ${ searchTerm }

from 'main'

${ noResults }

claude-leak-bench/bench

History

Nicolas Massé adbc76188c Keep only the podman sandbox Drop host mode: HostSandbox, the environment allowlist, the sidecar host command and the in-process recording proxy. proxy.py is now the proxy container's entry point only, and aiohttp/zstandard leave the Python deps. Images are tagged with a hash of the files they are built from, so editing proxy.py or a Containerfile rebuilds them. Reports drop the sandbox level. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01GZY2T82aEHnuVC4ALzRcPh		4 weeks ago
..
__init__.py	Initial end-to-end secret leak bench for Claude Code	4 weeks ago
cases.py	Initial end-to-end secret leak bench for Claude Code	4 weeks ago
proxy.py	Keep only the podman sandbox	4 weeks ago
runner.py	Keep only the podman sandbox	4 weeks ago
subjects.py	Keep only the podman sandbox	4 weeks ago