opencode/picoclaw
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
picoclaw/docs
History
uiyzzi 16d23d8cdc feat(security): add sensitive data filtering for tool results sent to 
LLM

Prevent LLM from seeing its own credentials (API keys, tokens, secrets)
by filtering sensitive values from tool call results before sending to
the
model. Values are collected from .security.yml and replaced with
[FILTERED] using an efficient strings.Replacer (O(n+m)).

- Add FilterSensitiveData and FilterMinLength to ToolsConfig
- Implement SensitiveDataReplacer() with sync.Once caching in
  SecurityConfig
- Use reflection to collect all sensitive values (Model API keys,
  channel
  tokens, web tool API keys, skills tokens)
- Apply filtering in agent loop at 4 tool result locations
- Add comprehensive tests covering all token types
2026-03-23 20:55:41 +08:00
..
agent-refactor merge: resolve conflicts between refactor/agent and main 2026-03-22 19:21:58 +08:00
channels Merge pull request #1893 from afjcjsbx/feat/skill-channel-commands 2026-03-23 09:04:06 +01:00
design feat(agent): add hook manager foundation 2026-03-21 19:15:10 +08:00
fr fix: restore missing assets and address Copilot review comments 2026-03-23 10:21:06 +08:00
hooks merge: resolve conflicts between refactor/agent and main 2026-03-22 19:21:58 +08:00
it docs: add Italian language 2026-03-18 19:41:57 +01:00
ja fix: restore missing assets and address Copilot review comments 2026-03-23 10:21:06 +08:00
migration docs: fix inaccuracies, add translations, and expand channel docs (#1837) 2026-03-20 22:37:05 +08:00
pt-br fix: restore missing assets and address Copilot review comments 2026-03-23 10:21:06 +08:00
vi fix: restore missing assets and address Copilot review comments 2026-03-23 10:21:06 +08:00
zh feat(security): add sensitive data filtering for tool results sent to 2026-03-23 20:55:41 +08:00
ANTIGRAVITY_AUTH.md docs: fix inaccuracies, add translations, and expand channel docs (#1837) 2026-03-20 22:37:05 +08:00
ANTIGRAVITY_USAGE.md fix: correct docs misalignment across translations and guides 2026-02-20 18:23:22 +03:00
chat-apps.md Merge pull request #1893 from afjcjsbx/feat/skill-channel-commands 2026-03-23 09:04:06 +01:00
config-versioning.md refactor Config to add Version and migratable 2026-03-12 13:52:55 +08:00
configuration.md feat(security): add sensitive data filtering for tool results sent to 2026-03-23 20:55:41 +08:00
credential_encryption.md docs: fix inaccuracies, add translations, and expand channel docs (#1837) 2026-03-20 22:37:05 +08:00
debug.md feat(tool): debug tool usage via channels (#1332) 2026-03-19 18:08:50 +08:00
docker.md docs: fix inaccuracies, add translations, and expand channel docs (#1837) 2026-03-20 22:37:05 +08:00
hardware-compatibility.md docs: fix inaccuracies, add translations, and expand channel docs (#1837) 2026-03-20 22:37:05 +08:00
providers.md docs(voice): Update docs for audio-transcription 2026-03-22 21:04:10 +08:00
sensitive_data_filtering.md feat(security): add sensitive data filtering for tool results sent to 2026-03-23 20:55:41 +08:00
spawn-tasks.md docs: fix inaccuracies, add translations, and expand channel docs (#1837) 2026-03-20 22:37:05 +08:00
steering.md fix(agent) scope steering 2026-03-20 19:44:00 +01:00
subturn.md merge: resolve conflicts between refactor/agent and main 2026-03-22 19:21:58 +08:00
tools_configuration.md feat(security): add sensitive data filtering for tool results sent to 2026-03-23 20:55:41 +08:00
troubleshooting.md docs: fix inaccuracies, add translations, and expand channel docs (#1837) 2026-03-20 22:37:05 +08:00