...
npx skills add https://github.com/Leep-GH/Lee-s-squad --skill secret-handling-leep-gh
Please help me install this Agent Skill. Skill: secret-handling Source: https://github.com/Leep-GH/Lee-s-squad/tree/main/.copilot/skills/secret-handling Command: npx skills add https://github.com/Leep-GH/Lee-s-squad --skill secret-handling-leep-gh
Spawned agents have read access to the repository, including .env files containing live credentials. This skill codifies absolute prohibitions and safe alternatives.
Follow the guardrails to configure the system so agents never read live secrets and enable pre-commit checks.
High-intent search queries and answers about installing and using this skill.
To prevent agents from reading environment secrets, enforce absolute prohibitions that block access to live .env files and require consulting .env.example for schema references or asking the user for safe alternatives.
The best way to stop secret leaks in Squad workflows is to prohibit writing secret data to .squad/ files during decision making and enforce redaction or placeholder references for sensitive values.
Set up Scribe pre-commit validation to scan staged changes for secrets, block commits containing secret data, and provide remediation guidance to safely remove the leaked credentials.
Yes, Scribe pre-commit validation blocks commits containing secrets by scanning staged changes and providing remediation steps to ensure no secret data is committed.
Agents must consult .env.example instead of live .env files because spawned agents have repository read access, and reading live credentials risks secret leaks, so .env.example provides a safe schema reference.
usepowershellCodify prohibitions on reading and leaking credentials from repository secret files.
softsparkGenerate Conventional Commits and validate staged git changes for secrets and large files.
lbouriezPrevent agents from reading secret files and writing secrets to .squad directories.
voidrotDetects credential leaks in Git repositories and blocks pushes containing secrets.
