Menu
Example/seed/fixture files must use placeholders not real credentials. Pre-commit grep check + enforcement hooks.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
| name | credential-discipline |
| description | Example/seed/fixture files must use placeholders not real credentials. Pre-commit grep check + enforcement hooks. |
Any file under: examples/, seed/, seed_data/, test_data/, fixtures/, mocks/
Or filename contains: example, seed, fixture, mock, or sample
| Real | Placeholder |
|---|---|
AIzaSy... (Firebase API key) | <your-firebase-api-key> |
cntvDfj7cGUhUFkxcmV3 (campaign ID) | <your-campaign-id> |
0wf6sCREyLcgynidU5LjyZEfm7D2 (Firebase UID) | <your-firebase-uid> |
<your-email@gmail.com> (test email) | <your-test-user>@example.com |
worldarchitecture-ai (GCP project) | <your-firebase-project-id> |
| Any other identifier | <your-<descriptor>> |
grep -rnE 'AIza[A-Za-z0-9_-]{35}|cntvDfj7cGUhUFkxcmV3|L5iB5eWq8TyzQW3qFDDv|z7eDk3NzY1mB6BTm23yu|Z2sEA1hQW3YJbyQHvvt6|XHWCpllzfKNgwf6o1Jvc|zheWLda5wsDVQTdXrRFm|0wf6sCREyLcgynidU5LjyZEfm7D2|<your-email@gmail.com>|worldarchitecture-ai|worldai-prod-c4977' examples/ 2>&1
~/.claude/hooks/pre-commit-git-identity-example-com-guard.sh blocks commits by @example.com.tests/test_example_placeholder_discipline.sh in CI for browserclaw and jleechanclaw..githooks/pre-commit chains identity guard + discipline test on staged examples/**.3 real production credential leaks landed in public repos between 2026-02 and 2026-04 (commits 3aac8fe8, 45836c8). .gitleaksignore is suppression, not a fix — rotate keys + rewrite history.
If example needs real credential: move to private repo, parameterize via env var, or use Firebase Emulator.
Token-efficient second opinion slash command /advice. Extracts decision point + artifact (≤150 lines), then fans out in parallel: (1) Opus subagent reviewer with fallback chain codex→agy→cursor, (2) /research on the decision topic, (3) /secondo multi-model opinion. Use instead of advisor() which ships the full conversation uncached.
Lazy senior-dev mode — the seven-rung ladder that decides whether to write code at all, whether to reuse code that already exists, and whether to prefer stdlib/platform/installed deps over a new dependency. Use before writing any code, every PR diff, every fix, every feature. Source attribution included.
Use when making any "X is enabled" / "feature X works" / "cache works" claim in a running session — requires runtime probe output from the standard harness startup path, NOT a launchd/cron test that explicitly sets the activation env var.
Pre-flight checklist for self-hosted runner failures. Use when investigating low disk, missing runner, or stuck Green Gate on the jleechanorg/worldarchitect.ai fleet. Always verifies host-level container state, not just GitHub API.
When asked to verify whether a Claude Code feature works (especially slash commands, dialogs, pickers, status indicators), spawn a real interactive TUI session in cmux — never use `claude --print "/feature"` as a test, because --print is non-interactive and will always return "isn't available in this environment" regardless of whether the feature actually works.
Read ~/.hermes/agent-orchestrator.yaml BEFORE declaring an --agent <X> value unsupported. Lists plugin shorthands (wafer, minimax, agy).