docs: Replace skills page with CLI reference#13
Conversation
Remove the skills documentation page and add a new CLI reference page documenting all available commands (warden, init, add, setup-app), global options, target types, and environment variables. Update navigation links across all pages. Co-Authored-By: Claude <noreply@anthropic.com>
|
The latest updates on your projects. Learn more about Vercel for GitHub.
|
![sentry-warden[bot]](https://avatars.githubusercontent.com/in/2755838?s=60&v=4){kind=small}
| <Terminal showCopy={true} copyText="export WARDEN_ANTHROPIC_API_KEY=sk-ant-... && warden"> | ||
| <Code | ||
| code={`# Set your API key | ||
| export WARDEN_ANTHROPIC_API_KEY=sk-ant-... | ||
|
|
There was a problem hiding this comment.
🟠 Documentation encourages API key exposure in shell history
The documentation shows exporting the API key directly in shell commands. This causes the API key to be stored in shell history files (e.g., ~/.bash_history, ~/.zsh_history), which can lead to credential exposure. If the history file is accessed by another user, backed up to insecure locations, or inadvertently shared (e.g., in screenshots or logs), the API key could be compromised.
Suggested fix: Recommend using .env.local file instead of exporting directly in the shell, or use a space prefix to avoid history storage in bash/zsh
| <Terminal showCopy={true} copyText="export WARDEN_ANTHROPIC_API_KEY=sk-ant-... && warden"> | |
| <Code | |
| code={`# Set your API key | |
| export WARDEN_ANTHROPIC_API_KEY=sk-ant-... | |
| <Terminal showCopy={true} copyText="echo 'WARDEN_ANTHROPIC_API_KEY=sk-ant-...' > .env.local && warden"> | |
| code={`# Set your API key in .env.local | |
| echo 'WARDEN_ANTHROPIC_API_KEY=sk-ant-...' > .env.local |
warden: security-review
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix is OFF. To automatically fix reported issues with Cloud Agents, enable Autofix in the Cursor dashboard.
Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>
security-reviewsecurity-review: Found 1 issue (1 low) No findings to report. |
1 participant
Remove the skills documentation page and add a new CLI reference page with command-card style documentation.
The skills page documented built-in skills and custom skill creation, but the CLI reference is more immediately useful for users getting started. The new CLI page documents:
warden,warden init,warden add,warden setup-app--skill,--fix,--json,--fail-on, etc.WARDEN_ANTHROPIC_API_KEYNavigation updated across all pages to link to
/cliinstead of/skills.