Block unsafe .env reads and scan staged git changes for secrets.
npx skills add https://github.com/dotnet/maui-labs --skill secret-handling-dotnet
Please help me install this Agent Skill. Skill: secret-handling Source: https://github.com/dotnet/maui-labs/tree/main/src/Comet/.copilot/skills/secret-handling Command: npx skills add https://github.com/dotnet/maui-labs --skill secret-handling-dotnet
It prevents AI-assisted workflows from leaking live credentials by reading prohibited .env files and committing sensitive information into .squad/ history.
Ask the agent for the required environment variable schema, then ensure it reads .env.example and never commits .env or any detected credentials to .squad/.
High-intent search queries and answers about installing and using this skill.
Prevent environment variable leaks by blocking unsafe reads of live .env files and enforcing fail-loud pre-commit secret scanning. The system scans staged changes for credential patterns and aborts the commit if matches are found.
Pre-commit secret scanning works by requiring staged-file scanning for defined secret regex patterns and filenames. It fails loud with explicit remediation instructions if detected credentials are bound for .squad/ files.
Yes, you can use .env.example, .env.sample, and .env.template files safely. The system prohibits live .env and .env.* variants that contain real credentials while allowing safe templates.
Git pre-commit secret scanning detects API keys, passwords, connection strings, JWTs, private keys, cloud credentials, and email addresses. It aborts the commit with explicit user reporting when matches are found.
Your git commit fails because the pre-commit safeguard detected secret patterns in staged changes written by spawned agent processes. It aborts the commit loudly to prevent credential exposure in .squad/ history.
The best way to secure agent workflows is to prohibit .env file access, scan staged git changes for secret regex patterns, and abort commits with explicit reporting when matches are detected.
nghiahsgsGenerate and validate .env.local and .env.example templates for taw-kit projects.
cwinvestmentsScan source code and git history for hardcoded secrets and leaked API keys.
HouseGarofaloConfigure Git pre-commit hooks for multi-language projects.
giladresisiStage all Git changes, scan for secrets, and commit with conventional format.
