arbiterforge/codearbiter · plugins/ca-codex/routines/secret-handling/SKILL.md
secret-handling skillA
The secret-source gate. Routed to when changed code reads, writes, or passes a secret — API key, token, password, connection string, signing key, certificate, or any value that grants access. Validates that every secret comes from the approved store and never lands in source, log, test fixture, error response, image, or LLM prompt. The auth-crypto-reviewer agent is dispatched as the reviewer.
Latest version
mdr add arbiterforge/codearbiter/secret-handling@git:20260830.00ec49fExact content
mdr add arbiterforge/codearbiter/secret-handling@sha256:290080a42dd5eb37Badge
[](https://markdownregistry.com/a/art_ielodhy3j63ldqd6)
0 badge views in 30 days
Versions
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| git:20260830.00ec49f latest | 2026-08-30 | 00ec49f | 4,691 B | A | view · diff |
| git:20260808.362892a | 2026-08-08 | 362892a | 4,657 B | A | view · diff |
| git:20260712.eee3949 | 2026-07-12 | eee3949 | 4,626 B | A | view |
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (4691 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
arbiterforge/codearbiter · 142 stars · license AGPL-3.0 · pushed 2026-09-06 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ielodhy3j63ldqd6 GET https://markdownregistry.com/api/v1/resolve?ref=arbiterforge/codearbiter/secret-handling GET https://markdownregistry.com/api/v1/blob/290080a42dd5eb3752c46973adecb14532e45eede361e0dc440ba1e26df78501