Add explicit rule that skills must never hardcode secrets automatically. Include config → env → error lookup pattern for scripts.