Injects secrets into shell commands at exec time; plaintext never reaches the LLM context
Free
Scanned where there is a package or repository to read, and every release diffed against the tool surface we already hold.
Injects secrets into shell commands at exec time; plaintext never reaches the LLM context