diff --git a/.claude/settings.local.json b/.claude/settings.local.json
deleted file mode 100644
index 6e8450de9..000000000
--- a/.claude/settings.local.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "permissions": {
-    "allow": [
-      "Bash(python3:*)",
-      "Bash(git push:*)",
-      "Bash(gh pr create:*)"
-    ],
-    "deny": [],
-    "ask": []
-  }
-}
diff --git a/.gitignore b/.gitignore
index e600676cb..90bf50b49 100644
--- a/.gitignore
+++ b/.gitignore
@@ -23,3 +23,6 @@ __pycache__/
 .DS_Store
 .venv/
 output.zip
+
+# Claude Code local settings can store secrets from approved commands
+**/.claude/settings.local.json