took the authentication token from the HTTP request header, modified the process’s environment variables, then called the library

Not to defend claude or anything, but I had a junior do something extremely similar to this once. Lol