From d4dee0f03113efbdc1c620a4c55bbb61225963c2 Mon Sep 17 00:00:00 2001
From: David Karlsson <35727626+dvdksn@users.noreply.github.com>
Date: Tue, 20 Oct 2026 08:10:52 +0000
Subject: [PATCH] docs: explain missing-secret failures in cleanup scripts

Automation guidance did not cover secret removals that match no stored entry. Explain the nonzero result and checking for matching secrets before cleanup.
---
 content/manuals/ai/sandboxes/workflows/automation.md | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/content/manuals/ai/sandboxes/workflows/automation.md b/content/manuals/ai/sandboxes/workflows/automation.md
index 4e46136060..ea653a325f 100644
--- a/content/manuals/ai/sandboxes/workflows/automation.md
+++ b/content/manuals/ai/sandboxes/workflows/automation.md
@@ -66,7 +66,8 @@ script.
 
 For repeatable cleanup, check which resources exist before removing them. For
 example, use `sbx mcp ls` before `sbx mcp rm`, which fails for an unregistered
-server even with `--force`.
+server even with `--force`. Likewise, `sbx secret rm` fails if no secret matches
+the selector; check for matches with `sbx secret ls` before removing secrets.
 
 ## Parse command output