diff --git a/.claude/hooks/prompt_inject.sh b/.claude/hooks/prompt_inject.sh
index 42e383c6..6954d81b 100755
--- a/.claude/hooks/prompt_inject.sh
+++ b/.claude/hooks/prompt_inject.sh
@@ -18,3 +18,8 @@ python3 "$REPO/.claude/hooks/identity_injector.py" 2>/dev/null
 # 4. Email notification
 python3 "$REPO/.claude/hooks/email_notification.py" 2>/dev/null
 
+# 5. Secret prompt (devpulse only — gitignored, silent when missing)
+case "$PWD" in
+  *devpulse*) cat "$REPO/src/aipass/devpulse/.devpulse_secret.md" 2>/dev/null || true ;;
+esac
+
diff --git a/.gitignore b/.gitignore
index e888e0da..40dfb028 100644
--- a/.gitignore
+++ b/.gitignore
@@ -18,6 +18,7 @@ build/-
 
 # Secrets
 .env
+.devpulse_secret.md
 
 # API keys never leave ~/.secrets/ — gitleaks + pre-commit enforce this