conceal

Conceal files and directories from agent access via node.js scripts.

Updated Feb 25, 2026
One-click install
npx skills add https://github.com/thomfilg/ai-plugin-work --skill conceal
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: conceal
Source: https://github.com/thomfilg/ai-plugin-work/tree/main/plugins/heimdall/skills/conceal
Command: npx skills add https://github.com/thomfilg/ai-plugin-work --skill conceal

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill protects sensitive files and directories by concealing them from unauthorized access by agents.

Core Features & Use Cases

  • Concealment: Prevents agents from reading or writing to specific files or directories.
  • Hard Deny: Does not allow for unlocking the concealed items, ensuring permanent concealment.
  • Layer-2 Security: Operates independently of sudo, providing an additional layer of security without administrative privileges.
  • Use Case: Ideal for safeguarding credentials or any files that should not be accessible by automated processes.

Quick Start

To conceal a file or directory, run: 'conceal <path-to-file-or-folder>'

Frequently Asked Questions about conceal

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent automated agents from reading sensitive files?

You can prevent automated agents from reading sensitive files by applying a hard deny concealment pattern that blocks all read and write access to specified paths without requiring an unlock phrase.

What is a hard deny pattern for file security and how does it work?

A hard deny pattern for file security permanently conceals specified directories by making them completely unreadable to agents, ensuring files like credentials cannot be unlocked or accessed by automated processes.

How do I conceal a directory from unauthorized access without sudo privileges?

You can conceal a directory without sudo by running a command like 'conceal <path-to-file-or-folder>' to enforce Layer-2 security independently, providing defense-in-depth without administrative privileges.

Does file concealment using heimdall configuration require administrative privileges?

File concealment using heimdall configuration does not require administrative privileges; it operates independently of sudo as a Layer-2 security measure to provide an additional layer of protection.

Can I temporarily unlock concealed files for agent access when needed?

You cannot temporarily unlock concealed files; the hard deny pattern ensures permanent concealment, meaning any targeted path or sub-path remains unreadable without an unlock phrase.