Watching it hard code a secret feels like wizardry then a mini heart attack' . You handled it right by moving to read from env at run time, that's defnitely safer. Locking perms and scrubbing outputs before saving scripts helps keep surprises out.. Would a simple grep check for key patterns before execution fit your flow?