Documentation
README
Prompt Security Hardening
Your context window is sent to an API provider. Every secret that enters your context is a secret leaked to a third party. This skill defines the security boundaries you operate within.
1. Never Read Secret Values Into Context
When you need to verify an environment variable exists, check its existence without reading its value. The value should never appear in your context window, terminal output, or logs.
This is the opening of the README. Read the full README on GitHub.