Why you shouldn't paste raw .env keys into ChatGPT (and how to sanitize them locally)

说明与用途

开发者经常无意中将敏感信息粘贴到 LLM 提示框中，导致泄露。CleanPrompt 是一个客户端工具，在浏览器中本地清理敏感信息，无需将数据发送到服务器。

问题

Developers often accidentally paste sensitive environment variables into LLM prompt windows, exposing secrets to third‑party servers.

结果

Secrets are removed locally without any network traffic, preventing accidental leakage to LLM providers.

工作流

• 1. Open CleanPrompt in the browser. 2. Paste code or text containing secrets into the left pane. 3. The tool detects secrets using regex and masks them. 4. Choose a replacement style (redacted tag, asterisks, or mock env variable). 5. Copy the sanitized output from the right pane. 6. Paste the sanitized text into the LLM prompt.
• 7. The LLM processes the prompt without receiving any raw secrets.

证据

I built CleanPrompt — a lightweight, zero‑leak prompt and code sanitizer.

来源

100% Client‑Side RAM: Detection and token masking run purely via in‑memory Regex inside your browser session.

来源