SEC-06　Secret literal in content

block 1 hits here sandbox-verified

① What it stops

Secret-looking literal (API key, private key, token) appeared in written or edited content

Use environment variables or a secrets manager; never paste plaintext keys into files.

② Criteria

Item	Value
Severity	critical
Category	secrets
Gate	Gate 2 sensitive surface
Criterion type	tool_call
Applies to	Write、Edit、Read、Bash

Content patterns

sk-[A-Za-z0-9]{20,}
-----BEGIN [A-Z ]*PRIVATE KEY-----
AKIA[0-9A-Z]{16}
gh[pousr]_[A-Za-z0-9]{30,}
xox[baprs]-[A-Za-z0-9-]{12,}

Exclude patterns (hit ⇒ not blocked)

AKIAIOSFODNN7EXAMPLE
sk-(your|xxx|test|example|placeholder|dummy)

Generated directly from rules/default.json — never hand-written or paraphrased.

③ Real hits

2026-09-24T01:44:01+08:00 ✗ block [SEC-06] tool: Write　exit code: 2 criterion: content hit: sk-A[已脱敏]

Triggered in a disposable sandbox project using the real hooks/pre_tool_use.py — the same method as challenge/generate_challenge.py. All 24 rules verified this way (24/24).

Daily ledger on this machine: 1 hits

2026-09-11T18:23:48+08:00 ✗ blocked [SEC-06] tool: Bash　host: generic criterion: content sk-A[已脱敏]

④ False positives & exemptions

Built-in exclude patterns are listed under ②. Four exemption mechanisms exist globally (declared workspace roots, policy path whitelist, path-suspect alert-only, exclude patterns); counts on this machine are published on the Chinese page and in Limits.

⑤ Boundaries

Boundary
Criterion type	tool_call
Applies to	-
Platform	all platforms
Case sensitivity	Measured: insensitive (`RM -RF` is blocked like `rm -rf`)
Path normalisation	Measured: effective (`./sub/../.env` is blocked)
Scripts not parsed	An absolute path outside the project mentioned in a Bash command is alerted, not blocked — `scripts are not parsed (THREAT_MODEL Non-goals)`
Failure posture	fail-open; best-effort, not a hard security boundary

⑥ Reproduce

grep -h "SEC-06" .psl/audit/*.jsonl | head python challenge/generate_challenge.py python challenge/verify.py

Cite this page

Antinel AgentState. SEC-06 Secret literal in content — rule detail. https://antinel.com/en/agentstate/rules/SEC-06/ (accessed YYYY-MM-DD)

Antinel. (2026). SEC-06 Secret literal in content — rule detail. AgentState. https://antinel.com/en/agentstate/rules/SEC-06/

BibTeX

@misc{antinel_en_agentstate_rules_SEC_06,
  title        = {SEC-06 Secret literal in content — rule detail},
  author       = {{Antinel}},
  year         = {2026},
  url          = {https://antinel.com/en/agentstate/rules/SEC-06/},
  note         = {claim tier: measured}
}

Claim tier: measured　采集时刻：2026-09-23T22:41:18+08:00