Your agent has been writing your secrets to disk
I scanned 1.2 GB of my own Claude Code and Codex transcripts for credentials and found 373 across 105 files, including a live API key repeated 60 times and a plaintext password. The script is a single file with no dependencies. The write-up is mostly about the four bugs that got past a green test suite.