Clarify credential handling in AGENTS instructions

This commit is contained in:
2026-02-18 22:08:18 -08:00
committed by Kat Huang
parent 9dd86cfac9
commit acaa644e25

View File

@@ -50,6 +50,8 @@
- When a credential (password, API key, token, etc.) is needed to complete a task, use the `pass` utility to retrieve it.
- The pass password store lives at `~/.password-store/`.
- Use `pass show <entry>` to retrieve a secret, or `pass find <search-term>` to locate entries.
- Never write passwords or other credentials directly into version-controlled files in any repo (for example `dotfiles/claude/settings.local.json`).
- Provide credentials to tools/config at runtime via environment variables or inline `pass` usage instead of committing them.
- Never hardcode credentials or store them in plain text files.
## Project links (local symlink index)