Background Subagents Can Leak Secrets
Claude Code's background subagents emit system prompt fragments, including authorization data. A security issue to be aware of!
Developers reported an issue with Claude Code's background subagents stalling and leaking authorization data in system prompt fragments. This is labeled as a security concern and should be taken seriously.
The solution is structural: credentials should be scoped per subagent, subagent outputs treated as untrusted, and the system prompt separated from the working context. These measures will help prevent privacy breaches.
This synthesis was produced from its source by AI; there is no human editor or manual review step. How we work