II.
SecretHandlingPolicy overview
Reference · livesecret-handling:no-secrets-in-prompts
No secrets in agent prompts overview
Inspect the raw attributes, linked wiki pages, and inbound or outbound graph edges for secret-handling:no-secrets-in-prompts.
Attributes
displayName
No secrets in agent prompts
rule
Tracker credentials, vendor API keys, and SSH keys MUST NOT appear in prompt template body or front-matter.
scope
workflow-config
enforcement
workflow-linter
rationale
Prompt body is logged in run journals; secrets must come from environment only.
Outgoing edges
None.
Incoming edges
applies_secret_policy1
- workflow:linear-default·WorkflowDefinitionDefault Linear-driven WORKFLOW.md