mirror of
https://github.com/NomaDamas/k-skill.git
synced 2026-06-24 02:04:11 +00:00
ef2c69b81c
Agent environments (OpenClaw, Claude Code, Codex) assume users delegate credentials to the agent. sops+age added setup friction without real security benefit since the agent decrypts on every call anyway. New model: skills declare required env var names; how they are supplied is up to the agent (own vault, shell env, or ~/.config/k-skill/secrets.env as the default fallback with 0600 permissions). Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
29 lines
674 B
Bash
Executable file
29 lines
674 B
Bash
Executable file
#!/usr/bin/env bash
|
|
set -euo pipefail
|
|
|
|
secrets_file="${1:-$HOME/.config/k-skill/secrets.env}"
|
|
|
|
missing=0
|
|
|
|
if [[ ! -f "$secrets_file" ]]; then
|
|
echo "missing secrets file: $secrets_file"
|
|
missing=1
|
|
else
|
|
perms=$(stat -f '%Lp' "$secrets_file" 2>/dev/null || stat -c '%a' "$secrets_file" 2>/dev/null)
|
|
if [[ "$perms" != "600" ]]; then
|
|
echo "insecure permissions on $secrets_file: $perms (expected 600)"
|
|
missing=1
|
|
fi
|
|
fi
|
|
|
|
if [[ "$missing" -ne 0 ]]; then
|
|
cat <<EOF
|
|
next steps:
|
|
1. create ~/.config/k-skill/secrets.env with your credentials
|
|
2. chmod 0600 ~/.config/k-skill/secrets.env
|
|
3. run this check again
|
|
EOF
|
|
exit 1
|
|
fi
|
|
|
|
echo "k-skill setup looks usable"
|