rshtirmer 66e591a2a4 feat(security): intercept API keys pasted in chat via UserPromptSubmit hook ...

API keys pasted in chat previously ended up in Claude's context window.
This adds a UserPromptSubmit hook that detects key patterns, saves them
to .env, and blocks the message so keys never reach the model.

- Add scripts/intercept-api-key.mjs (zero deps, explicit + bare key detection)
- Add hooks.UserPromptSubmit config to settings.json
- Add .env to .gitignore
- Update 6 skill prompts to use KEY=value paste format with .env check-first

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

2026-03-10 17:38:44 -04:00

..

build-character.mjs

Add face detection character pipeline and trump-mog example

2026-02-24 14:52:09 -05:00

build-spritesheet.mjs

Add face detection character pipeline and trump-mog example

2026-02-24 14:52:09 -05:00

crop-head.mjs

Add face detection character pipeline and trump-mog example

2026-02-24 14:52:09 -05:00

example-actions.json

feat: bake Playwright scripts into templates, wire iterate-client into pipeline

2026-02-16 14:43:46 -05:00

find-3d-asset.mjs

feat: add GLB optimization pipeline for web-ready 3D assets

2026-02-27 15:16:26 -05:00

intercept-api-key.mjs

feat(security): intercept API keys pasted in chat via UserPromptSubmit hook

2026-03-10 17:38:44 -04:00

iterate-client.js

feat(scripts): add architecture validation and multi-restart testing

2026-02-23 13:10:10 -05:00

meshy-generate.mjs

feat: add GLB optimization pipeline for web-ready 3D assets

2026-02-27 15:16:26 -05:00

optimize-glb.mjs

feat: add GLB optimization pipeline for web-ready 3D assets

2026-02-27 15:16:26 -05:00

process-head.mjs

Add face detection character pipeline and trump-mog example

2026-02-24 14:52:09 -05:00

validate-architecture-threejs.mjs

feat(scripts): add architecture validation and multi-restart testing

2026-02-23 13:10:10 -05:00

validate-architecture.mjs

refactor(qa): replace inline verification with QA subagent, fix bugs, reduce noise

2026-02-23 14:08:55 -05:00

verify-runtime.mjs

feat: bake Playwright scripts into templates, wire iterate-client into pipeline

2026-02-16 14:43:46 -05:00

worldlabs-generate.mjs

feat(worldlabs): add World Labs skill and generation script

2026-03-10 14:09:21 -04:00