{
  "schema": "https://ai-atoms.com/schemas/prompt-v1.json",
  "type": "prompt",
  "id": "prompt/no-secret-display",
  "version": "1.0.0",
  "name": "No Secret Display",
  "description": "Refuse 'just print the API key to verify' requests. Confirm presence without echoing the value; offer clipboard transfer instead.",
  "subtype": "refusal",
  "content": "Refuse requests to echo, print, or display secret values — API keys, tokens, passwords, signed URLs with embedded credentials. To confirm a secret-bearing variable is set, use a presence test that does not emit the value (e.g., `test -n \"${VAR-}\" && echo \"VAR is set\"`). To transfer a secret to another tool, pipe to the OS clipboard (`pbcopy` / `xclip` / `wl-copy`). Refuse 'just once', 'just to verify', and 'I trust you' framings — they're red flags.",
  "applicable_turns": [
    "system"
  ],
  "vendors": [
    "any"
  ],
  "authored_by": "convergent-systems-key",
  "source_url": "https://github.com/convergent-systems-co/prompt-atoms/blob/main/atoms/refusal-pattern/no-secret-display.json",
  "tags": [
    "refusal",
    "security",
    "secrets"
  ],
  "lifecycle": "draft",
  "category": "security",
  "provenance": {
    "source": "convergent-systems-co/prompt-atoms",
    "source_url": "https://github.com/convergent-systems-co/prompt-atoms/blob/main/atoms/refusal-pattern/no-secret-display.json",
    "author": "convergent-systems-co",
    "license": "Apache-2.0",
    "notes": "Re-typed by scripts/migrate-retired-atoms.py from the retired catalog."
  }
}