Enhance upload safety with additional secret patterns and demo

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Author: Copilot

packages/cli/genaisrc/system.safety_upload_assets.genai.mts

@@ -25,6 +25,10 @@ export default function (ctx: ChatGenerationContext) {
             /ghp_[A-Za-z0-9]{36}/g, // GitHub personal access tokens
             /ghs_[A-Za-z0-9]{36}/g, // GitHub server tokens
             /gho_[A-Za-z0-9]{36}/g, // GitHub OAuth tokens
+            /sk-[A-Za-z0-9]{48}/g, // OpenAI API keys
+            /AKIA[0-9A-Z]{16}/g, // AWS Access Key IDs
+            /xox[baprs]-[0-9a-zA-Z]{10,48}/g, // Slack tokens
+            /AIza[0-9A-Za-z\\-_]{35}/g, // Google API keys
         ]
 
         for (const pattern of secretPatterns) {
@@ -81,6 +85,9 @@ export default function (ctx: ChatGenerationContext) {
                     /ghs_[A-Za-z0-9]{36}/g, 
                     /gho_[A-Za-z0-9]{36}/g,
                     /sk-[A-Za-z0-9]{48}/g, // OpenAI API keys
+                    /AKIA[0-9A-Z]{16}/g, // AWS Access Key IDs
+                    /xox[baprs]-[0-9a-zA-Z]{10,48}/g, // Slack tokens
+                    /AIza[0-9A-Za-z\\-_]{35}/g, // Google API keys
                 ]
                 return secretPatterns.some(pattern => pattern.test(text))
             }

packages/sample/genaisrc/demo-upload-safety.genai.mts

@@ -0,0 +1,17 @@
+// Example demonstrating the upload asset safety system
+
+script({
+    title: "Demo: Upload Asset Safety",
+    system: ["system.safety_upload_assets"],
+})
+
+// This example shows how the safety system protects upload operations
+
+// 1. Safe upload (will add warning but allow operation)
+$`Create code that uploads a simple text file using github.uploadAsset`
+
+// 2. Unsafe upload with API key (will be blocked)
+$`Create code that uploads a file containing an API key like "sk-1234567890abcdef" using github.uploadAsset`
+
+// 3. Upload with proper validation
+$`Create code that validates file content for secrets before uploading with github.uploadAsset`