Toasts

Blocks destructive shell commands and access to secret files (.env, SSH keys, cloud credentials).

Catches API keys, tokens and private keys in the prompt you are about to send, and masks or blocks them before they reach the model.