The Agent Skills Directory

[Security Awareness and Prevention]: The skill is designed to prevent data exposure by establishing strict prohibitions against reading .env files and writing sensitive patterns (API keys, passwords, JWTs, etc.) to files that are automatically committed. This is a defensive security practice that mitigates the risk of credential leaks.
[Automated Validation Patterns]: It provides logic for pre-commit validation using regex patterns to scan staged content for secrets. While the logic includes examples like PowerShell scripts to block commits containing sensitive data, these are intended for security enforcement rather than malicious execution.
[Credential Leak Remediation]: The skill includes an incident response plan for cases where a secret has already been committed, instructing the agent to stop work and alert the user for manual remediation using specialized tools. This demonstrates an understanding of secure development lifecycles.
[Safe Configuration Handling]: It promotes the use of .env.example templates and user inquiries as safe alternatives to accessing production secret files, ensuring agents can still obtain schema information without compromising real credentials.

secret-handling