From 01834dcbda47d304e3f74e60aafbdc9f84f7a426 Mon Sep 17 00:00:00 2001
From: Ivan Malison <IvanMalison@gmail.com>
Date: Tue, 10 Feb 2026 17:38:08 -0800
Subject: [PATCH] agents: add credential retrieval instructions using pass

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
---
 dotfiles/agents/AGENTS.md | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/dotfiles/agents/AGENTS.md b/dotfiles/agents/AGENTS.md
index e25ec079..1634709a 100644
--- a/dotfiles/agents/AGENTS.md
+++ b/dotfiles/agents/AGENTS.md
@@ -38,3 +38,9 @@
 - If you are not sure what the package is called in nixpkgs, use:
 
   nix search nixpkgs <name-or-keyword>
+
+## Credentials
+- When a credential (password, API key, token, etc.) is needed to complete a task, use the `pass` utility to retrieve it.
+- The pass password store lives at `~/.password-store/`.
+- Use `pass show <entry>` to retrieve a secret, or `pass find <search-term>` to locate entries.
+- Never hardcode credentials or store them in plain text files.