LeakySensey: High-volume autonomous filesystem access by Claude Code agent

Arnold Chan@slaz

•updated Sep 17, 2026•0•0•0

Detects high-volume filesystem activity (exceeding 300 operations in 5 minutes) initiated by 'claude-code' or 'claude' processes. This behavior may indicate an autonomous, patched, or jailbroken AI coding assistant performing mass file operations or reconnaissance without user confirmation.