Zero-Leak Guardian: An AI Agent That Stops Developer Secrets from Ever Leaving Your Machine

User discovered Claude Code automatically scans entire projects and reads .env and other secret files by default, sending API keys and credentials to Anthropic without explicit consent; they shared global and project-level mitigation workarounds and called for consent prompts and safer defaults.