Blocks tool calls that would send your own email address off the machine: in a User-Agent,
a URL, a header, a request body, a web/MCP tool call or a published page.
Context: anthropics/claude-code#107757.
- Reads your address at run time from
~/.claude.json(the signed-in account),git config --global user.emailand optionalWP_PRIVATE_EMAILS(comma-separated). No address is written in the file. - Matches any case,
%40,[at],(at)and "name at domain". - Shell commands are blocked only when they also reach the network (curl, wget, http(s)://, urllib, requests,