Query launches secret prompts for coding agents

Query addresses a real weakness in agentic development: environment variables are convenient, but they can expose credentials to models with shell access.

• –`query run` keeps secrets out of agent output and conversation history
• –`query write` supports owner-only `.env` files for local workflows
• –The agent skill teaches safe defaults and limits `get` to nonsecret values
• –macOS-only support, no SSH, CI, or container use, narrows its immediate audience
• –Its security value depends on developers choosing scoped credentials and avoiding commands that print secrets