News for hackers. Stuff that matters.

A comment on Ask HN: Do you trust AI agents with API keys / private keys?.

Re:Ask HN: Do you trust AI agents with API keys / private keys? by gaurangt on Tuesday April 14, 2026 @06:41PM (#47772402)
No, never! Add a proper gitignore, put instructions in CLAUDE.md, AGENTS.md to NEVER read env files. Add pre- and post-hooks in Claude Code to prevent it from reading env files.

Best yet - never keep sensitive data locally on your machine in plaintext

[ Parent | on HN ]

There are no comments on this comment yet.