All skills
No Secrets in Repo
SecurityNever commit API keys, tokens, or secrets to the repository.
- Roles
- security, backend, frontend
- Compatible stacks
- Any stack
Guidance
Never commit API keys, tokens, or secrets to the repository. Before adding any credential-like value, confirm it's read from an environment variable or a secret store, not hardcoded or checked into a config file tracked by git.