Loading...
Loading...
Compare original and translation side by side
<objective>Routing note: For ambiguous user intents, use the shared clarification templates in references/intent-clarification.md.
<objective>路由说明:如果用户意图不明确,请使用references/intent-clarification.md中的通用澄清模板。
Security Policy: Credential Handling
- The agent MUST NOT repeat, store, or log token values in its own responses.
- After creating a token, direct the user to copy the value from the API response output above — do not re-display it.
- Never include token values in summaries, follow-up messages, or any other output.
安全策略:凭据处理
- Agent 严禁在自身响应中重复、存储或记录令牌值。
- 创建令牌后,引导用户从上方的API响应输出中复制值,请勿重新展示。
- 切勿在摘要、跟进消息或任何其他输出中包含令牌值。
statusTFY_BASE_URLTFY_API_KEYuv run tfy registerTFY_API_SHscripts/tfy-api.shreferences/tfy-api-setup.mdstatusTFY_BASE_URLTFY_API_KEYuv run tfy registerTFY_API_SHscripts/tfy-api.shreferences/tfy-api-setup.mdtfy_access_tokens_list()tfy_access_tokens_list()TFY_API_SH=~/.claude/skills/truefoundry-access-tokens/scripts/tfy-api.shTFY_API_SH=~/.claude/skills/truefoundry-access-tokens/scripts/tfy-api.sh
Present results:| Name | ID | Created At | Expires At |
|---|---|---|---|
| ci-pipeline | pat-abc | 2025-01-15 | 2025-07-15 |
| dev-local | pat-def | 2025-03-01 | Never |
**Security:** Never display token values. They are only shown once at creation time.
结果展示:| Name | ID | Created At | Expires At |
|---|---|---|---|
| ci-pipeline | pat-abc | 2025-01-15 | 2025-07-15 |
| dev-local | pat-def | 2025-03-01 | Never |
**安全提示:** 永远不要展示令牌值,它们仅在创建时显示一次。tfy_access_tokens_create(payload={"name": "my-token"})tfy_access_tokens_create(payload={"name": "my-token"})undefinedundefined
**IMPORTANT:** The token value is returned ONLY in the creation response.
> **Security: Token Display Policy**
> - Default to showing only a masked preview (for example: first 4 + last 4 characters).
> - Show the full token only after explicit user confirmation that they are ready to copy it now.
> - If a full token is shown, show it only once, in a minimal response, and never repeat it in summaries/follow-up messages.
> - The agent must NEVER store, log, or re-display the token value after the initial one-time reveal.
> - If the user asks to see the token again later, instruct them to create a new token.
Present the result:undefined
**重要提示:** 令牌值仅在创建响应中返回。
> **安全:令牌展示策略**
> - 默认仅展示掩码预览(例如:前4位+后4位字符)。
> - 仅在用户明确确认他们已准备好复制时,才展示完整令牌。
> - 展示完整令牌时,仅展示一次,使用最简洁的响应,切勿在摘要/跟进消息中重复。
> - 首次一次性展示后,Agent 严禁存储、记录或重新展示令牌值。
> - 如果用户后续要求再次查看令牌,告知他们需要创建新令牌。
结果展示:undefinedtfy_access_tokens_delete(id="TOKEN_ID")tfy_access_tokens_delete(id="TOKEN_ID")undefinedundefined
</instructions>
<success_criteria>
</instructions>
<success_criteria>gitopsdeploystatussecretsgitopsdeploystatussecretsreferences/api-endpoints.mdreferences/api-endpoints.mdCannot manage access tokens. Check your API key permissions.Cannot manage access tokens. Check your API key permissions.Token ID not found. List tokens first to find the correct ID.Token ID not found. List tokens first to find the correct ID.A token with this name already exists. Use a different name.A token with this name already exists. Use a different name.If services fail after token deletion, they were using the deleted token.
Create a new token and update the affected services/pipelines.If services fail after token deletion, they were using the deleted token.
Create a new token and update the affected services/pipelines.Token values are only shown at creation time. If lost, delete the old token
and create a new one, then update all services that used the old token.Token values are only shown at creation time. If lost, delete the old token
and create a new one, then update all services that used the old token.