Secure Coding
Rules:
- Never hardcode API keys, tokens, or secrets.
- Use environment variables or local untracked config.
- Provide .env.example only.
- Do not print secrets in logs.
- Do not include secrets in README, tests, screenshots, or committed files.
Use when adding API providers, environment variables, external services, logs, deployment configs, or documentation that may expose secrets.
npx skillmds@latest add lennney/secure-coding Rules:
lennney/ticketpilot/tree/main/.claude/skills/secure-coding commit 8a250f1201