Repository navigation
Feature: Auto-mask API keys in VS Code extension chat #22548
Description
API keys and secrets should be automatically detected and masked in the VS Code extension chat interface.
Currently, if an API key appears in conversation (e.g., from reading a config file or user input), it displays in plaintext. This is poor security UX - keys should be redacted to something like sk-proj-****...**** in the display layer.
Many tools implement this pattern (GitHub redacts tokens in logs, etc.). Would improve the security posture of the extension.
Note: This was observed in the VS Code extension - untested whether CLI has the same behavior.
Activity
github-actions commentedon Feb 2, 2026
Found 3 possible duplicate issues:
This issue will be automatically closed as a duplicate in 3 days.
🤖 Generated with Claude Code
feat(plugins): Add secrets-scanner plugin for credential exposure det…
stevenelliottjr commentedon Feb 2, 2026
Related: I've created a plugin that provides secret detection for the CLI: PR #22594
The secrets-scanner plugin scans all tool output for 35+ secret patterns and displays warnings when credentials are detected. While it doesn't auto-mask (which would require core/UI changes), it provides immediate alerts.
This could potentially be adapted for the VS Code extension as well.
github-actions commentedon Mar 3, 2026
Closing for now — inactive for too long. Please open a new issue if this is still relevant.
github-actions commentedon Mar 12, 2026
This issue has been automatically locked since it was closed and has not had any activity for 7 days. If you're experiencing a similar issue, please file a new issue and reference this one if it's relevant.