Paste your settings.json. Watch 10 real attacks play out. See what survives.
Paste the contents of ~/.claude/settings.json below. Nothing leaves your browser.
Your settings.json has no hooks configured. All 10 attacks will succeed. This is the default state of Claude Code โ and it's why users lose 50 GB of files.
Read Chapter 1 free โ understand where your tokens go