gavrielc 1549ad503e security: pass secrets via SDK env option and delete temp file (#213) ...

Pass secrets to the SDK via the `env` query option instead of setting
process.env, so Bash subprocesses never inherit API keys. Delete
/tmp/input.json immediately after reading to remove secrets from disk.

Co-authored-by: Claude Opus 4.6 <noreply@anthropic.com>

2026-02-13 22:46:42 +02:00

2.0 KiB

Raw Blame History

View Raw