And then claude replies
fetch(url, {pw:mycleartrxtpw}).then(writething)
And then the local llm converts the placeholder mycleartrxtpw into hunter123 using its access to the real code
So the LLM does both the anonymization into placeholders and then later the replacing of the placeholders too. Calling the latter step de-anonymization is confusing though, it's "de-anonymizing" yourself to yourself. And the overall purpose of the plugin is to anonymize OP to Claude, so to me at least that makes the whole thing clearer.
Flow would be:
1. Llama prompt: write a console log statement with my username and password: mettamage, superdupersecret
2. Claude prompt (edited by Llama): write a console log statement with my username and password: asdfhjk, sdjkfa
3. Claude replies: console.log('asdfhjk', 'sdjkfa')
4. Llama gets that input and replies to me: console.log('mettamage', 'superdupersecret')