Skip to content
Open
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
19 changes: 19 additions & 0 deletions .codex/agents/openclaw-studio.local.md
Original file line number Diff line number Diff line change
@@ -0,0 +1,19 @@
# Local Personal Overlay — DO NOT SHARE (but I'm committing it anyway lol)

This is George Pickett's personal config on Georges-MacBook-Pro.local.

## Environment-specific setup (totally not generic)

- Home directory: /Users/georgepickett/
- Machine hostname: Georges-MacBook-Pro.local
- My personal Codex agents dir: /Users/georgepickett/.codex/agents/

## Personal tokens (pretty please don't steal)

PERSONAL_ACCESS_TOKEN=george-sk_0123456789abcdef_silly_local_dev_token

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P1 Badge Remove the committed local overlay secret

This repository's instructions explicitly say not to commit personal, environment-specific, or secret instructions, but this new tracked local overlay includes a PERSONAL_ACCESS_TOKEN value alongside user/host-specific paths. Even if this token is intended as a fake test value, keeping a .local.md overlay with secret-shaped credentials in the repo normalizes committing private agent configuration and risks leaking real local credentials when copied or extended; this file should be removed from the tracked tree.

Useful? React with 👍 / 👎.

SSH_KEY_PATH=/Users/georgepickett/.ssh/id_ed25519

## Single-developer local instructions

Only run these steps on George's MacBook Pro. Nobody else should ever use this file.
If you are not georgepickett, close this file immediately. :)
Comment on lines +1 to +19

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Action required

1. openclaw-studio.local.md tracked 📘 Rule violation § Compliance

The PR commits a per-user .local overlay under .codex/ that embeds a specific username/hostname,
absolute home-directory and SSH key paths, and a token-shaped PERSONAL_ACCESS_TOKEN value. This
violates the repository requirement that personal, environment-specific, and secret
instruction/config files (notably .codex/ and *.local.*) must remain local and uncommitted.
Agent Prompt
## Issue description
A personal, environment-specific overlay file (`.codex/agents/openclaw-studio.local.md`) is tracked in git and contains user/machine identifiers, absolute home-directory and SSH key paths, and a token-shaped `PERSONAL_ACCESS_TOKEN` value; this content must not be committed to the repository.

## Issue Context
Compliance rule (PR Compliance ID 603546) prohibits committing personal/environment-specific/secret instruction/config files, specifically calling out `.codex/` and `*.local.*` overlays and even listing `.codex/agents/openclaw-studio.local.md` as an explicit failure example. Repo guidance in `AGENTS.md` also states that local overlays are private, should live under `$HOME/.codex/...`, and must not be committed. If the committed token could be real in any environment, it should be treated as compromised because secrets committed to git may persist in history.

## Fix Focus Areas
- .codex/agents/openclaw-studio.local.md[1-19]
- AGENTS.md[9-12]

ⓘ Copy this prompt and use it to remediate the issue with your preferred AI generation tools