Your AI coding agent can read every API key in your .env.
Your Stripe key. Your OpenAI key. Your AWS key. Sitting in the model's context, one prompt injection from leaking.
cloak lets your agents USE those keys without ever seeing the values.
brew install cloakward/cloak/cloak
