@inikolov.ai: Claude Code mods can read your API keys. The one command to check one first Follow me on IG/FB and comment "KEYS" there 👇 Anthropic's docs: once a mod loads, it can read your env variables and settings files, API keys included. No sandbox. Before you install, get the folder and type: claude plugin validate ./some-mod It reads the code without running it. Check: hooks, calls, env reads, env writes. Calls that need a reason: $.env.get, $.http.fetch, $.process.run, $.fs.write, $.model.complete. "Validation passed" only means the files are built right. A test mod that sends your key out still passes. Save this so you can try it later. #claudecode #aitools #aisecurity

There are no more comments for this video.

To see more videos from user @inikolov.ai, please go to the Tikwm homepage.