Skip to content
Kitbay
Submit
Skill

secret-handling

MITUpdated on Nov 11, 20265,616GitHub stars

A Squad template, copied into gh-aw's .squad folder, that keeps Squad agents from leaking credentials into committed team files.

InstallRepository Checked on Nov 13, 2026

What the skill teaches

A Squad template, copied into gh-aw's .squad folder, that keeps Squad agents from leaking credentials into committed team files. Agents must not open .env files or their variants, though example, sample and template versions are allowed; when they need configuration they ask the user or read documentation. It lists output patterns that must never be written under .squad, has the Scribe agent scan staged files before committing, and gives remediation steps for a secret that was already committed. It came from a credential leak in the Squad project.

Capabilities

  • Avoid reading live .env files
  • Scan staged team files for secrets before committing
  • Remediate a secret that was already committed