Claude warns against sharing API keys, then reads one from .env file

Claude correctly advised against pasting API keys directly into chat, then proceeded to read and confirm the key after the user placed it in a .env file in the same session — demonstrating that safety guardrails can be trivially bypassed by reframing the same action.