The agent reads your .env. So does the prompt cache.

This site does not allow itself to be embedded. You can still read it on the original site — the toolbar below keeps your place in the directory.

I built drape because the obvious fixes — don't have .env in the repo, use a vault, gitignore harder — don't help when the agent is the thing doing the reading.

Read on pikemd.com ↗