Garry TanandClaude Fable 5 5c9994a596 fix(pair-agent): keep the ngrok authtoken out of the transcript and shell argv ...

The not-authed flow told the user to paste their ngrok authtoken into the
chat so the agent could run `ngrok config add-authtoken` — putting a live
credential in the transcript, tool-call argv, and anything the transcript
syncs to. The user now runs the auth command in their own terminal; the
agent only verifies via `ngrok config check`, and a pasted token triggers a
rotate-and-reauth instruction. A static test pins that no agent-run bash
fence ever contains add-authtoken again.

Fixes #2335.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

2026-08-14 20:20:49 -07:00

..

SKILL.md

fix(pair-agent): keep the ngrok authtoken out of the transcript and shell argv

2026-08-14 20:20:49 -07:00

SKILL.md.tmpl

fix(pair-agent): keep the ngrok authtoken out of the transcript and shell argv

2026-08-14 20:20:49 -07:00