[Bug] Secrets exposed in conversation logging even if read from 1password

Resolved 💬 3 comments Opened Dec 15, 2025 by doozMen Closed Dec 19, 2025

Bug Description
you should really stop logging secrets in conversations. why the need to log things like gh secret set CLAUDE_CODE_OAUTH_TOKEN --body "$(op read 'op://promptping.ai/Google PromptPing - claude.ai/Token')" --repo doozMen/agentPing


⏺ Bash(op read "op://promptping.ai/Google PromptPing - claude.ai/Token")
  ⎿ sk-ant-oat01-Fh57... `// should really not log the read out!

**Environment Info**
- Platform: darwin
- Terminal: WarpTerminal
- Version: 2.0.69
- Feedback ID: 

**Errors**
```json
[{"error":"ZodError\n    at error (/$bunfs/root/claude:367:27138)\n    at parse (/$bunfs/root/claude:367:20400)\n    at uDB (/$bunfs/root/claude:994:283)\n    at dDB (/$bunfs/root/claude:994:3272)\n    at xW1 (/$bunfs/root/claude:994:7536)\n    at async jW1 (/$bunfs/root/claude:994:5778)\n    at async <anonymous> (/$bunfs/root/claude:994:14734)\n    at async rF (/$bunfs/root/claude:1018:27273)\n    at async <anonymous> (/$bunfs/root/claude:4640:677)\n    at processTicksAndRejections (native:7:39)","timestamp":"2025-12-15T23:47:48.850Z"},{"error":"Error: Plugin path not found: /Users/stijnwillems/Developer/rossel-agentic-architecture/marketplace-plugins/rosselkit-toolkit\n    at xW1 (/$bunfs/root/claude:994:6240)\n    at xW1 (/$bunfs/root/claude:994:13741)\n    at jW1 (/$bunfs/root/claude:994:5778)\n    at async <anonymous> (/$bunfs/root/claude:994:14734)\n    at async rF (/$bunfs/root/claude:1018:27273)\n    at async <anonymous> (/$bunfs/root/claude:4640:677)\n    at processTicksAndRejections (native:7:39)","timestamp":"2025-12-15T23:47:48.868Z"},{"error":"Error: NON-FATAL: Lock acquisition failed for /Users/stijnwillems/.local/share/claude/versions/2.0.69 (expected in multi-process scenarios)\n    at j8R (/$bunfs/root/claude:2242:2155)\n    at H_A (/$bunfs/root/claude:2242:1875)\n    at processTicksAndRejections (native:7:39)","timestamp":"2025-12-15T23:47:49.157Z"},{"error":"Error\n    at KU (/$bunfs/root/claude:59:1143)\n    at <anonymous> (/$bunfs/root/claude:60:10080)\n    at emit (node:events:92:22)\n    at endReadableNT (internal:streams/readable:861:50)\n    at processTicksAndRejections (native:7:39)\n    at request (/$bunfs/root/claude:62:2147)\n    at processTicksAndRejections (native:7:39)","timestamp":"2025-12-15T23:47:49.158Z"},{"error":"Error\n    at KU (/$bunfs/root/claude:59:1143)\n    at <anonymous> (/$bunfs/root/claude:60:10080)\n    at emit (node:events:92:22)\n    at endReadableNT (internal:streams/readable:861:50)\n    at processTicksAndRejections (native:7:39)\n    at request (/$bunfs/root/claude:62:2147)\n    at processTicksAndRejections (native:7:39)","timestamp":"2025-12-15T23:47:50.078Z"},{"error":"Error\n    at KU (/$bunfs/root/claude:59:1143)\n    at <anonymous> (/$bunfs/root/claude:60:10080)\n    at emit (node:events:92:22)\n    at endReadableNT (internal:streams/readable:861:50)\n    at processTicksAndRejections (native:7:39)\n    at request (/$bunfs/root/claude:62:2147)\n    at processTicksAndRejections (native:7:39)","timestamp":"2025-12-15T23:57:45.483Z"}]

View original on GitHub ↗

This issue has 3 comments on GitHub. Read the full discussion on GitHub ↗