# Security

## Secrets

- Put API keys only in a local `.env` (see `.env.example`).
- `.env` is gitignored. Do not paste keys into source, issues, or demos.
- Providers read `OPENAI_API_KEY` / `ANTHROPIC_API_KEY` / `GEMINI_API_KEY` from the environment.

## What this SDK does *not* do

- It does not sandbox tool code. Tools run in your process with your privileges.
- Approval / pause-resume and guardrails reduce risk; they are not a substitute for least-privilege credentials.
- Debug bundles under `.clearloop/` may contain prompts and tool I/O — keep that directory private (gitignored).

## Reporting

If you find a vulnerability in Clearloop, open a private security advisory on the GitHub repo (or email the maintainer listed on npm) instead of filing a public issue with exploit details.