Skip to content

Security: sarhej/claude-fix

Security

SECURITY.md

Security Policy

Local-only behavior

claude-fix is a local macOS shell script. It does not send telemetry, collect analytics, contact project servers, or upload Claude profile data.

The script:

  • Creates AppleScript launcher apps in ~/Applications.
  • Points those launchers at your existing Claude.app.
  • Uses separate local Claude profile directories such as ~/ClaudeWork.
  • Removes only launchers marked as generated by claude-fix.

The script does not modify, patch, or re-sign Claude.app.

Dependency behavior

The script uses built-in macOS command-line tools only. It does not install Python packages, Homebrew packages, browser helpers, or any other dependencies.

Reporting a vulnerability

Please open a private security advisory on GitHub, or contact Sergej Fedorovic through https://strt.it with:

  • macOS version
  • Claude Desktop version
  • command you ran
  • relevant terminal output
  • why you believe profile data, app bundles, or local system state could be at risk

Please do not include personal Claude data, account tokens, cookies, or private company information in a report.

There aren't any published security advisories