mirror of
https://github.com/NomaDamas/k-skill.git
synced 2026-06-24 02:04:11 +00:00
Credential-bearing skills now point to a shared cross-platform setup based on sops plus age instead of a hosted password manager. The repo also gains a default setup skill and a small verification script so users can bring one encrypted secrets file to every relevant skill. Constraint: The secret workflow must work on macOS, Linux, and Windows without mandatory vendor signup Rejected: Keep 1Password CLI as the default | it requires account creation and sign-in Rejected: Plaintext .env as the default | too easy to leak in a repo and too easy for tools to read at rest Confidence: high Scope-risk: moderate Reversibility: clean Directive: If a future skill needs stronger isolation than exec-env provides, expose a capability wrapper instead of injecting the raw secret Tested: bash scripts/validate-skills.sh Tested: npx --yes skills add . --list Tested: bash scripts/check-setup.sh (expected failure without sops/age installed) Not-tested: End-to-end sops encryption and exec-env flow on a machine with sops and age installed
5 lines
142 B
Text
5 lines
142 B
Text
KSKILL_SRT_ID=replace-me
|
|
KSKILL_SRT_PASSWORD=replace-me
|
|
KSKILL_KTX_ID=replace-me
|
|
KSKILL_KTX_PASSWORD=replace-me
|
|
SEOUL_OPEN_API_KEY=replace-me
|