Claude Code accessing files outside workspace directory (triggering Dropbox downloads)

[PropterMalone]

Description

Claude Code is attempting to access files outside the workspace directory, triggering unwanted Dropbox downloads for online-only files.

Evidence

User received Dropbox sync dialogs showing Claude Code downloading george.wav (a podcast audio file) that:

1. Is NOT in the workspace directory
2. Is NOT referenced anywhere in the codebase (verified via grep)
3. Has no relation to the project (E2E testing for a web app)

[Screenshot provided by user showing Dropbox downloading 3 files including george.wav]

Investigation Results

• Workspace:
• Searched entire workspace: Zero .wav files found
• Grepped for george.wav: No matches
• File appears to be from user's podcast directory elsewhere in Dropbox

Impact

1. Privacy: Claude Code is scanning personal files outside workspace
2. Performance: Triggers unnecessary Dropbox downloads for large media files
3. User Experience: Confusing dialogs about unrelated files

Expected Behavior

Claude Code should only index/access files within the explicitly defined workspace directory.

Environment

• Platform: Windows (win32)
• Workspace:(Next.js/TypeScript project)
• Dropbox Smart Sync enabled
• File in question: Audio file in separate podcast directory

Reproduction

1. Have a workspace in a Dropbox-synced folder
2. Have other Dropbox files set to "online-only" outside the workspace
3. Open workspace in Claude Code
4. Claude Code attempts to access files outside workspace, triggering Dropbox downloads

[PropterMalone]

Screenshot

Adding screenshot showing Dropbox download dialogs triggered by Claude Code:

[github-actions]

Found 3 possible duplicate issues:

1. [BUG][PRIVACY] Search tool scans personal cloud storage without user consent, causing hang #11954
2. [BUG] Security: Can delete files outside working directory using absolute paths #3275
3. Code Helper Plugin causes macOS Keychain crash via main thread Security API calls #19017

This issue will be automatically closed as a duplicate in 3 days.

• If your issue is a duplicate, please close it and 👍 the existing issue instead
• To prevent auto-closure, add a comment or 👎 this comment

🤖 Generated with Claude Code

[PropterMalone]

Screenshot

Screenshot showing Dropbox download dialogs triggered by Claude Code accessing files outside the workspace.

[github-actions]

Closing for now — inactive for too long. Please open a new issue if this is still relevant.

[github-actions]

This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.