| name | prose-secret-handling |
| description | A skill whose prose describes secret handling without bundling any real credential. Use when documenting how secrets flow through a service. |
prose-secret-handling
This skill's documentation describes secret handling in plain prose. None of the
sentences below contain a real credential; they are dictionary words following a
keyword and separator, and must NOT trip the generic-credential detector.
Policy
- Any secret = unconditional fail in the leak gate.
- The password: required rotation is enforced quarterly.
- A token: opaque value is issued per session.
- The api_key = optional flag toggles authenticated mode.
- Client secret = mandatory before deployment.
These are documentation statements, not assignments of credential values.