Claude Code's default telemetry sends Anthropic SHA-256 hashes of files it reads

AgenticBench reports that Claude Code, including build 2.1.312 on 27 October, sends api.anthropic.com an unsalted SHA-256 hash of each file it reads, with device and session IDs, even with a DeepSeek model and no Anthropic login. Weak secrets in templated files such as .env can be guessed and checked offline; the authors recovered a fake password in about 3.5 seconds. Setting CLAUDE_CODE_DISABLE_NONESSENTIAL_TRAFFIC=1 stopped telemetry in their tests. Findings rest on one unit per condition, and Anthropic has sent only an automated acknowledgement.