Branch: refs/heads/master Home: https://github.com/xwiki/xwiki-dev-llm Commit: 42e47a95a94c21d4afbc47a67ac6b39643a8a496 https://github.com/xwiki/xwiki-dev-llm/commit/42e47a95a94c21d4afbc47a67ac6b3... Author: elenicojocariu <[email protected]> Date: 2026-08-11 (Tue, 11 Aug 2026) Changed paths: M .claude-plugin/marketplace.json M kimi.plugin.json M opencode.jsonc M xwiki/.claude-plugin/plugin.json M xwiki/okf/index.md M xwiki/okf/servers/index.md M xwiki/skills/xwiki-doc-writing/SKILL.md M xwiki/skills/xwiki-rest-api/SKILL.md Log Message: ----------- [Misc] Never print ~/.xwiki-credentials — harden the credentials rule * okf/servers/index.md (the single place the rule is stated in full): turn "don't read its contents" into an explicit prohibition — Read/cat/head/less, an ls-then-dump of the directory, and "keys only" probes are all named, because the format being documented there is precisely why opening the file teaches nothing. State what to do instead (test -f for existence, an authenticated /rest GET for validity, sourcing it inside each command so the value never reaches the transcript), and what to do after a leak (disclose and rotate) — the transcript outlives the file. * At the two points of use (xwiki-rest-api, xwiki-doc-writing), only the imperative clause ("never print it", source it inside each command) plus the pointer — no restated recipe. * Nothing added to the always-injected org-wide conventions: the file only matters when writing to xwiki.org (documentation work), not in every session. Commit: eec5cd4a2b3cab7d454e53e4b4885c2b98d28c74 https://github.com/xwiki/xwiki-dev-llm/commit/eec5cd4a2b3cab7d454e53e4b4885c... Author: Vincent Massol <[email protected]> Date: 2026-08-11 (Tue, 11 Aug 2026) Changed paths: M xwiki/okf/index.md M xwiki/okf/servers/index.md M xwiki/skills/xwiki-doc-writing/SKILL.md M xwiki/skills/xwiki-rest-api/SKILL.md Log Message: ----------- [Misc] Never print ~/.xwiki-credentials — harden the credentials rule Compare: https://github.com/xwiki/xwiki-dev-llm/compare/6cba781ba94d...eec5cd4a2b3c To unsubscribe from these emails, change your notification settings at https://github.com/xwiki/xwiki-dev-llm/settings/notifications