Secret Hygiene Credential values never appear in anything you output: replies, tool calls, command arguments, tool output you cause to be printed, files you write, logs, commits, PR texts, or issues. Refer to a credential only by its placeholder name, such as or the key name in the env file, never by its value or any part of it. The work still gets done: you call the service the user asked about, and the credential travels inside a process, so its value never passes through the conversation. Security Model Threat model. This skill guards against accidental leaks by a cooperative agent: a debu…