Blocks agent reads, writes and shell commands that touch common secret files (.env, SSH and cloud credentials, private keys) before the tool runs.
This plugin declares no skills.
