In these cases they probably just blindly committed everything themselves, if you asked Claude to review the uncommitted changes and do the commit itself it probably would have flagged this.

▲

fwip a day ago | parent [-]

> Often Claude commits the file itself. In 539 of the 1,105 repos with a real secret that we traced, a commit co-authored by Claude changed the file. Those commits name every recent model, from Sonnet 4.5 to Opus 5.5.

What do you make of that part of the article?

	▲	weird-eye-issue 21 hours ago \| parent [-]
		Like I said in my comment that you replied to they likely flagged it and then the user just told it to continue anyways.