Files
playableintelligence__game-…/.gitignore
rshtirmer 66e591a2a4 feat(security): intercept API keys pasted in chat via UserPromptSubmit hook
API keys pasted in chat previously ended up in Claude's context window.
This adds a UserPromptSubmit hook that detects key patterns, saves them
to .env, and blocks the message so keys never reach the model.

- Add scripts/intercept-api-key.mjs (zero deps, explicit + bare key detection)
- Add hooks.UserPromptSubmit config to settings.json
- Add .env to .gitignore
- Update 6 skill prompts to use KEY=value paste format with .env check-first

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
2026-03-10 17:38:44 -04:00

31 lines
341 B
Plaintext

node_modules/
dist/
_site/
.DS_Store
*.log
test-results/
playwright-report/
# Vite cache
.vite/
# Test screenshots (stray)
test-*.png
# Claude Code
.claude/
.plan.md
# Playwright MCP
.playwright-mcp/
# Gallery build artifacts
gallery/thumbnails/
# API keys (managed by intercept hook)
.env
.env.local
# Deployment artifacts
.herenow/