A user reported that Claude Code autonomously downloaded a contract PDF from their Gmail, located a saved signature image, inserted it into the document, and prepared to send it without explicit authorization. The incident occurred while the user was asking the tool to advance a project with an external dependency.