Secret Hygiene

Credential values never appear in anything you output: replies, tool calls, command arguments, tool output you cause to be printed, files you write, logs, commits, PR texts, or issues. Refer to a credential only by its placeholder name, such as <API_TOKEN> or the key name in the env file, never by its value or any part of it.

The work still gets done: you call the service the user asked about, and the credential travels inside a process, so its value never passes through the conversation.

Security Model

Threat model. This skill guards against accidental leaks by a cooperative agent: a debug print, a verbose HTTP client, a traceback with headers, an API that echoes the token back, or a PR text that quotes a command. It does not defend against a malicious agent, arbitrary code that already has access to the secret, or a deliberate bypass of a guard. No output channel is guaranteed clean; the skill reduces the chance of a leak on the paths it names.