sketch-security-guardrails

What problem does it solve?

Prevent accidental exposure of API keys, bearer tokens, raw images, full prompts, and other sensitive data when debugging, capturing proof videos, or collecting telemetry for image-focused AI tools.

Core Features & Use Cases

• Never log secrets: guidance to avoid logging API keys, auth headers, or bearer tokens.
• Never log raw images: rules to prohibit base64 or binary image payloads in logs and error reports.
• Minimal telemetry & safe debugging: recommendations to log only metadata (duration, provider, error codes), use hashed or truncated prompt representations, and use sample files or stubbed responses for demos and proof videos.
• Review and scrub before sharing: checklist items to scrub screenshots, console output, and recorded sessions to remove PII and secrets.

Quick Start

Use these guardrails to audit and remove any API keys, raw image payloads, or full prompt content from logs and telemetry before sharing or publishing debug traces.