本文へスキップ
Kitbay
掲載依頼
スキル

secret-handling

MIT2026年11月11日 更新5,616GitHubスター

A Squad template, copied into gh-aw's .squad folder, that keeps Squad agents from leaking credentials into committed team files.

スキルの内容

A Squad template, copied into gh-aw's .squad folder, that keeps Squad agents from leaking credentials into committed team files. Agents must not open .env files or their variants, though example, sample and template versions are allowed; when they need configuration they ask the user or read documentation. It lists output patterns that must never be written under .squad, has the Scribe agent scan staged files before committing, and gives remediation steps for a secret that was already committed. It came from a credential leak in the Squad project.

できること

  • Avoid reading live .env files
  • Scan staged team files for secrets before committing
  • Remediate a secret that was already committed