1,122 out of 104,185 is roughly 1 in 93 public copies holding a real secret, high for a file that is meant to stay local. A two-second check before any push: git ls-files .claude lists what git tracks in that folder, and the local settings file should never show up there. Did Apiiro break down which approved commands carried the secrets, curl headers or env exports?