It's dangerous to go alone, take this [1]

[1] https://github.com/cookiengineer/check-claude-code-exfil