Location
.claude/CLAUDE.md:43
hooks/protect-secrets.py:13
Description
CLAUDE.md says protect-secrets.py "Blocks Read/Write/Edit/Bash/Glob/Grep access to .env files" but the implementation blocks Archive/keys/ instead. .env blocking is handled by the settings.json deny list, not this hook. Documentation is misleading.
Suggested Fix
Update CLAUDE.md line 43 to say "Blocks access to Archive/keys/ cryptographic material".