# 2068 Security Pitfalls Abdac7c4

> Security Pitfalls

- Skill: `tools-only/2068-security-pitfalls-abdac7c4` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add tools-only/2068-security-pitfalls-abdac7c4`
- Raw SKILL.md: https://api.skillmd.com/api/skills/tools-only/2068-security-pitfalls-abdac7c4/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: tools-only (https://skillmd.com/u/tools-only)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/tools-only/2068-security-pitfalls-abdac7c4

---

# Security Pitfalls

## Security Pitfalls

### Exposing Secrets
```
PITFALL:
AI context includes sensitive data.
Secrets sent to AI providers.

SOLUTION:
- Use .cursorignore for .env files
- Use environment variables
- Enable Privacy Mode for sensitive code
- Never hardcode credentials
```

### Trusting AI for Security Code
```
PITFALL:
AI-generated auth/crypto code may have flaws.
Security vulnerabilities in generated code.

SOLUTION:
- Extra review for security code
- Use established libraries
- Security review by human expert
- Test with security tools
```

### API Keys in Settings
```
PITFALL:
Storing API keys in settings.json.
Keys visible in plaintext.

SOLUTION:
- Use environment variables
- Use secrets managers
- Never commit keys to repo
- Rotate keys if exposed
```