I read it the other way, their code contains eg fetch(url, pw:hunter123), and they're asking Claude anonymized questions like "implement handler for fetch(url, {pw:mycleartrxtpw})"
And then claude replies
fetch(url, {pw:mycleartrxtpw}).then(writething)
And then the local llm converts the placeholder mycleartrxtpw into hunter123 using its access to the real code
> Put in all your work related questions in the plugin, an LLM will make it as an abstract question for you to preview and send it
So the LLM does both the anonymization into placeholders and then later the replacing of the placeholders too. Calling the latter step de-anonymization is confusing though, it's "de-anonymizing" yourself to yourself. And the overall purpose of the plugin is to anonymize OP to Claude, so to me at least that makes the whole thing clearer.
It's that yea
Flow would be:
1. Llama prompt: write a console log statement with my username and password: mettamage, superdupersecret
2. Claude prompt (edited by Llama): write a console log statement with my username and password: asdfhjk, sdjkfa
3. Claude replies: console.log('asdfhjk', 'sdjkfa')
4. Llama gets that input and replies to me: console.log('mettamage', 'superdupersecret')