Command arguments are values supplied to a program when it is started from a command line. They can specify options, files, or data the program should use. Depending on the operating system and environment, arguments may be exposed in process listings, shell history, diagnostic output, or logs.
In cybersecurity, placing passwords, API keys, or tokens in command arguments can expose them beyond the intended secret store. In automated and AI-agent workflows, a secret passed this way may be captured in tool output or transcripts and retained or shared with other systems. Prefer secret managers, protected environment mechanisms, or other supported secure input methods; restrict access to process and execution logs, redact sensitive output, and use short-lived, narrowly scoped credentials.