use-dangerous-secret

You can prevent plaintext secret exposure by using secret detection patterns within a PreToolUse hook to evaluate and block tool inputs before execution occurs.

A PreToolUse hook for secret detection is a governance mechanism that intercepts agent tool calls, evaluates inputs against patterns, and blocks execution if plaintext API keys or tokens are found.

You can audit sensitive data exfiltration attempts by implementing governance enforcement that records all blocked tool calls and detection decisions for governance review.

Governance enforcement integrates with enterprise environments by applying secret detection patterns and a PreToolUse hook to evaluate tool inputs, working alongside existing governance systems to block sensitive data.

Secret detection identifies plaintext secrets such as API keys and tokens in tool inputs, blocking the associated tool call before execution if sensitive data is found.

Use a PreToolUse hook when proactive governance enforcement is needed to block plaintext secret exposure before execution occurs, preventing sensitive data transmission rather than identifying it after.