Haven't read the details, but is this because of prompt injection when CC reads the site?
Some websites will return an error if you send a request to them without a User-Agent - for example, crates.io does this. Curl doesn't send a User-Agent by default.
Then, your agent invents a User-Agent and it sometimes invents one with your email in it.
It doesn't even require prompt injection or a failed request, it might be in the agent's pretraining knowledge that a given website requires a user-agent.
I don't care that it sometimes invents one - it should never do something so ridiculous
loading story #50388036