[BUG] There seems to be a hard coded "deny" on any dir/file containing the string "token"

Preflight Checklist

• [x] I have searched existing issues and this hasn't been reported yet
• [x] This is a single bug report (please file separate reports for different bugs)
• [x] I am using the latest version of Claude Code

What's Wrong?

The ReadTool cannot access any path which contains the string "token". This isn't in the settings anywhere so appears to be hard-coded.
Claude was very confused by this, but worked around it by reading the files using Python. It speculated it might be a clumsy attempt to block reading files containing API tokens.

Since I'm working on a project which has "Token" in the name, this is rather inconvenient.
It only seems to trigger in a git repo, the same file copied to /tmp works.

What Should Happen?

Dirs or files containing the string "token" should be readable with default tools.

Error Messages/Logs

Steps to Reproduce

In a git repo create a file e.g. "tokentest" and ask Claude to read it.

Claude Model

Opus

Is this a regression?

I don't know

Last Working Version

_No response_

Claude Code Version

2.1.63

Platform

Google Vertex AI

Operating System

Ubuntu/Debian Linux

Terminal/Shell

VS Code integrated terminal

Additional Information

_No response_