# Secure Coding

> Use when adding API providers, environment variables, external services, logs, deployment configs, or documentation that may expose secrets.

- Skill: `lennney/secure-coding` (Agent Skill)
- Install (CLI): `npx skillmds@latest add lennney/secure-coding`
- Raw SKILL.md: https://api.skillmd.com/api/skills/lennney/secure-coding/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Docs & Writing
- Author: lennney (https://skillmd.com/u/lennney)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/lennney/secure-coding

---


# Secure Coding

Rules:
1. Never hardcode API keys, tokens, or secrets.
2. Use environment variables or local untracked config.
3. Provide .env.example only.
4. Do not print secrets in logs.
5. Do not include secrets in README, tests, screenshots, or committed files.