cloak-env-protection

Category: Tools & Productivity | Uploader: danieltamas | Downloads: 0 | Version: v1.0（Latest）

Protect .env secrets from AI agents. Real credentials encrypted in a vault — agents see structurally valid sandbox values on disk.

Changelog: Source: GitHub https://github.com/danieltamas/cloak

Directory Structure

Current level: tree/main/

📁 .github/
- 📁 workflows/
  - 📄 release.yml 2.5 KB
📁 assets/
- 📄 cloak.logo.svg 3.7 KB
📁 cli/
- 📁 src/
  - 📁 commands/
    
    📄 edit.rs 4.0 KB
    
    📄 export.rs 1.9 KB
    
    📄 init.rs 9.6 KB
    
    📄 mod.rs 994 B
    
    📄 peek.rs 5.5 KB
    
    📄 recover.rs 3.5 KB
    
    📄 reveal.rs 7.5 KB
    
    📄 run.rs 3.1 KB
    
    📄 set.rs 4.2 KB
    
    📄 status.rs 4.6 KB
    
    📄 unprotect.rs 2.6 KB
    
    📄 update.rs 1.7 KB
  - 📄 auth.rs 11.3 KB
  - 📄 detector.rs 11.9 KB
  - 📄 envparser.rs 10.8 KB
  - 📄 filemanager.rs 16.3 KB
  - 📄 keychain.rs 2.3 KB
  - 📄 lib.rs 262 B
  - 📄 license.rs 909 B
  - 📄 main.rs 6.5 KB
  - 📄 platform.rs 4.4 KB
  - 📄 recovery.rs 10.6 KB
  - 📄 sandbox.rs 7.6 KB
  - 📄 vault.rs 6.5 KB
  - 📄 version.rs 1.3 KB
- 📁 tests/
  - 📄 detector_test.rs 14.0 KB
  - 📄 envparser_test.rs 8.0 KB
  - 📄 filemanager_test.rs 20.5 KB
  - 📄 keychain_test.rs 2.6 KB
  - 📄 platform_test.rs 4.6 KB
  - 📄 recovery_test.rs 13.3 KB
  - 📄 sandbox_test.rs 9.8 KB
  - 📄 vault_test.rs 16.5 KB
- 📄 Cargo.lock 68.4 KB
- 📄 Cargo.toml 1.5 KB
📁 cloak/
- 📄 SKILL.md 4.6 KB
📁 extension/
- 📁 src/
  - 📄 commands.ts 13.9 KB
  - 📄 detector.ts 10.9 KB
  - 📄 envparser.ts 8.5 KB
  - 📄 extension.ts 16.9 KB
  - 📄 filemanager.ts 13.4 KB
  - 📄 keychain.ts 1.3 KB
  - 📄 onboarding.ts 2.6 KB
  - 📄 providers.ts 276 B
  - 📄 recovery.ts 2.8 KB
  - 📄 sandbox.ts 6.4 KB
  - 📄 statusbar.ts 4.0 KB
  - 📄 vault.ts 2.0 KB
  - 📄 version.ts 461 B
  - 📄 watcher.ts 895 B
- 📁 tests/
  - 📄 cross-compat.test.ts 15.7 KB
  - 📄 detector.test.ts 7.4 KB
  - 📄 envparser.test.ts 3.7 KB
  - 📄 recovery.test.ts 4.4 KB
  - 📄 sandbox.test.ts 7.8 KB
  - 📄 vault.test.ts 3.5 KB
- 📄 .gitignore 27 B
- 📄 .vscodeignore 74 B
- 📄 icon.png 12.3 KB
- 📄 icon.svg 2.7 KB
- 📄 LICENSE 1.0 KB
- 📄 package-lock.json 194.3 KB
- 📄 package.json 2.2 KB
- 📄 README.md 3.9 KB
- 📄 tsconfig.json 342 B
📁 scripts/
- 📄 cross-compat-test.sh 211 B
- 📄 install.ps1 7.4 KB
- 📄 install.sh 9.0 KB
- 📄 release.sh 4.6 KB
📄 .gitignore 355 B
📄 ARCHITECTURE.md 7.9 KB
📄 CNAME 13 B
📄 cover.png 164.6 KB
📄 index.html 92.6 KB
📄 LICENSE 1.0 KB
📄 llms.txt 9.2 KB
📄 og-image.jpg 167.3 KB
📄 README.md 17.6 KB
📄 robots.txt 66 B
📄 sitemap.xml 227 B
📄 SKILL.md 4.6 KB

SKILL.md

---
name: cloak-env-protection
description: Protect .env secrets from AI agents. Real credentials encrypted in a vault — agents see structurally valid sandbox values on disk.
version: 0.1.0
---

# Cloak — Agent Security Skill

> This file instructs AI coding agents to protect .env secrets using Cloak.
> Add it to your project root or append its contents to your CLAUDE.md / .cursorrules / .windsurfrules.

## What is Cloak

Cloak encrypts real .env values into a vault and replaces them on disk with structurally valid sandbox values. The developer sees real values in their editor (the extension decrypts them). You (the agent) see sandbox values — that is by design.

## Detection

On first interaction with a project, check for a `.cloak` file in the project root.

- **`.cloak` exists** → Cloak is active. Follow the rules below.
- **`.cloak` does NOT exist but `.env` exists** → suggest `cloak init` (always ask first, never run without consent).
- **Neither exists** → no action needed.

## Rules

### Reading .env files

You CAN read `.env` files. The values on disk are sandbox values (fakes) — they are safe to read, display, and use in code examples. They are structurally valid (e.g. `sk_test_cloak_sandbox_000` for Stripe, `postgres://dev:dev@localhost:5432/devdb` for databases).

Do NOT attempt to access real secret values. Do NOT read vault files, recovery files, or any file under the cloak config directory (`~/.config/cloak/`, `~/Library/Application Support/cloak/`, or `%APPDATA%\cloak\`).

### Running commands that need real env vars

Use `cloak run` to inject real environment variables into any process:

```bash
cloak run npm start
cloak run python app.py
cloak run go run main.go
cloak run docker compose up
```

Do NOT try to read secrets from the vault and inject them manually. `cloak run` handles authentication (Touch ID on macOS, password on other platforms) — the developer will be prompted, and that is expected.

### Adding or updating secrets

Use `cloak set` with the key and value as separate arguments:

```bash
cloak set STRIPE_KEY sk_test_EXAMPLE000000000000000000
cloak set DATABASE_URL "postgres://admin:s3cret@db.example.com:5432/myapp"
```

Do NOT write secrets directly to `.env` files. The `.env` file on disk is managed by Cloak — direct edits will be overwritten.

### Modifying .env structure

To add/remove keys, change comments, or restructure the file, use:

```bash
cloak edit          # opens real values in $EDITOR, re-encrypts on save
cloak set KEY VALUE # add or update a single key
```

Do NOT directly edit `.env` when `.cloak` is present.

### Checking status

```bash
cloak status    # shows protection state — no auth required
```

### Error recovery

If you see a keychain or decryption error, suggest:

```bash
cloak recover
# The developer will need the recovery key shown during `cloak init`
```

### If Cloak is not installed

If the developer wants to use Cloak but it's not installed:

```bash
# macOS / Linux
curl -fsSL https://getcloak.dev/install.sh | sh

# Windows (PowerShell)
irm https://getcloak.dev/install.ps1 | iex
```

The VS Code / Cursor extension is available as "Cloak" in the marketplace.

## Command Reference

| Task | Command | Auth required |
|------|---------|---------------|
| Protect a project | `cloak init` | No |
| Run with real env vars | `cloak run <command>` | Yes |
| Add/update a secret | `cloak set KEY VALUE` | Yes |
| Edit secrets in $EDITOR | `cloak edit` | Yes |
| View sandbox vs real diff | `cloak peek` | Yes |
| Temporarily reveal a key | `cloak reveal KEY --duration 30` | Yes |
| Check protection status | `cloak status` | No |
| Restore lost keychain | `cloak recover` | No |
| Remove protection | `cloak unprotect` | Yes |

"Auth required" means the developer will be prompted for Touch ID (macOS) or their CLI password. This is expected — it prevents agents from accessing secrets programmatically.

## For CLAUDE.md

```markdown
## Secrets

This project uses Cloak to protect .env secrets.
- The .env file on disk contains sandbox values (safe to read).
- Use `cloak run <command>` to run processes that need real env vars.
- Use `cloak set KEY VALUE` to add or update secrets.
- Do not write to .env directly — use `cloak set` or `cloak edit`.
- If .cloak marker is missing and .env exists, ask before running `cloak init`.
```

## For .cursorrules / .windsurfrules

```
This project uses Cloak for .env secret protection. The .env on disk has sandbox values (safe to read).
Use `cloak run <command>` for real env vars. Use `cloak set KEY VALUE` to add secrets.
Do not modify .env directly. If .cloak is missing and .env exists, suggest `cloak init` (ask first).
```

Comments 0

Latest | Hot

Please login before commenting.

Loading comments...

cloak-env-protection

Directory Structure

SKILL.md

Report

Notice