Does the model see my environment variables or secrets?

Not directly. The model sees what tools return. If a command prints environment variables or config files, that output is sent, with secrets like API keys and tokens replaced by [REDACTED:kind] automatically.

• Line's own sign-in token is never given to the commands, plugins or hooks it runs.
• Redaction is automated and may miss unusual formats.

Avoid asking Line to print env or secret files, and protect them with deny rules: "deny": ["read_file(.env*)", "bash(env*)", "bash(printenv*)"].