security· Sandboxes
Block echoed repo secrets in sandbox attachments
Sandbox files cited in agent replies are checked for exact workspace repo-secret values before attachment.
An upstream service can echo a credential into a sandbox file without giving it a recognizable token prefix. We now withhold cited files containing an exact repo-secret value from the task's workspace, while retaining the existing credential-pattern checks. Values shorter than eight characters are ignored to avoid false positives. This attachment check does not scan the agent's reply text or catch transformed or encoded secret values.