Enforce secret-read prohibitions and safe alternatives like .env.example.
npx skills add https://github.com/sytone/botnexus --skill secret-handling-sytone
Please help me install this Agent Skill. Skill: secret-handling Source: https://github.com/sytone/botnexus/tree/main/.copilot/skills/secret-handling Command: npx skills add https://github.com/sytone/botnexus --skill secret-handling-sytone
This Skill codifies absolute prohibitions and safe alternatives to prevent agents from reading live secrets in the repository and from writing credentials to .squad/ committed files.
Ask the user to use .env.example for schema and guidance instead of reading live secrets.
High-intent search queries and answers about installing and using this skill.
To prevent AI agents from reading live secrets, enforce restrictions on sensitive files like .env and provide safe alternatives such as .env.example for schema and configuration guidance.
Stop credentials from being written to committed files by applying pre-commit validation to block risky content, redact exposed secrets, and emit remediation guidance before artifacts are committed.
A safe alternative to using .env files for agent configuration is .env.example, which provides the required schema and guidance without exposing live credentials or sensitive data to the agent.
Pre-commit validation detects secret leakage by scanning generated decisions, logs, and histories for risky content, blocking the commit and emitting guidance to redact secrets and use safe alternatives.
Yes, you can use this for secure coding across any codebase where agents access repository files, ensuring safe non-secret data is used in generated decisions, logs, and workflows.
usepowershellCodify prohibitions on reading and leaking credentials from repository secret files.
chdalyProhibit agents from reading .env files and committing secrets to .squad/ files.
ActiveInferenceInstituteAudit GNN pipeline security and validate access control for generated code.
ronniegeraghtyPrevent agents from reading .env files and writing secrets to .squad/ files.
