NAME

secret-debug - diagnostic; sometimes hidden

SYNOPSIS

secret-debug

DESCRIPTION

A leaf that exists in the CLI surface but is suppressed from MCP when Options.SkipPaths = []string{"secret-debug"}. Pattern: a diagnostic command that should be reachable when an operator types it at a shell, but should not appear in the agent's tool inventory.

Examples:

# default mode: tool `secret-debug` IS in tools/list
demo default secret-debug
# hello from secret-debug

# skip mode: tool is NOT in tools/list, agent cannot call it
demo skip secret-debug
# (operator-only CLI invocation still works)
# hello from secret-debug

Operating model: a SkipPaths-protected leaf is operator-only by convention. A hostile or jailbroken agent CANNOT discover it via MCP, but it CAN execute the binary directly if it has shell access. Treat SkipPaths as polish (keeps the tool inventory tidy, prevents accidental calls), not as a security mechanism.

Usage:

secret-debug [GLOBAL OPTIONS] [command [COMMAND OPTIONS]] [ARGUMENTS...]