Security Awareness and Token Redaction

Security Awareness and Token Redaction

Priority: MEDIUM

Problem:
GitHub PAT token exposed in transcript (ghp_BKwj...). While user said "we'll audit security later," AI should still warn and redact sensitive values proactively.

Current Behavior:

Secrets appear in tool outputs
No automatic redaction
No warnings about sensitive data exposure
Expected Behavior:

Auto-detect tokens/secrets in outputs
Redact in display: ghp_****
Warn: "I noticed a GitHub token in the output. I've redacted it for security."
Flag before committing sensitive files: "Warning: .env contains credentials. Should this be in .gitignore?"
Impact:

Security risk if transcripts are shared
Easy to accidentally commit secrets
Professional AI should protect user by default