Secrets Handling Review

Core Workflow

1. Identify any credentials, tokens, keys, cookies, env vars, config files, or secret-like placeholders mentioned by the skill.
2. Check whether the skill asks to read, print, store, transmit, log, or commit secrets.
3. Review scripts and examples for accidental secret exposure in output, screenshots, generated files, traces, or error reports.
4. Verify redaction, least privilege, and explicit approval expectations.
5. Recommend removal, placeholder replacement, redaction rules, .gitignore updates, or blocked publication.
6. Report residual risk and safe-use instructions.

Safety Rules