Skip to content
cccskills
FreePublished on GitHub

secrets-bootstrap

Safely work with encrypted secrets, environment files, and signing material in this repository. Use when a task requires loading, decrypting, validating, or explaining the repo's secrets and signing setup.

The English summary is being prepared. Showing the original description.

See how to install

Files included (1)

  • SKILL.md2.0 KB

SKILL.md (original)

Review the instructions the agent will receive before you install.

Flutter Template Secrets Bootstrap

Use this skill when a task requires secret handling in this repository.

Read First

  • AGENTS.md
  • README.md
  • extras/secrets/tools/
  • android/extras/keystores/README.md
  • makefile

Safety Rule

Do not touch secrets unless the task clearly requires it.

That includes:

  • .env
  • .env-development
  • .env-staging
  • .env-production
  • keystore files
  • encrypted secret files in extras/secrets/
  • generated iOS config files

Workflow

  1. Confirm why secret access is needed.
  2. Inspect the existing secret-loading scripts instead of improvising commands.
  3. Prefer existing make targets and scripts:
    • make secretsDecrypt
    • make secretsEncrypt
    • make secretsClean
  4. Keep encrypted files and generated decrypted files conceptually separate.
  5. Avoid logging secret values in output, comments, or diffs.
  6. If a task only needs to know whether a value exists, verify presence without printing contents.

Repo Notes

  • Secret tooling lives under extras/secrets/tools/.
  • README documents the expected age and sops flow.
  • Android keystore guidance has its own README.
  • Environment files are referenced by pubspec.yaml and loaded by flavor in lib/app/setup/setup_app.dart.

When To Stop And Ask

  • the task needs a missing secret
  • the task would rotate or overwrite encrypted files
  • the task would expose secret contents in logs or committed files
  • the task needs signing or distribution credentials that are not already available

Completion Criteria

  • used existing scripts or make targets where possible
  • avoided exposing sensitive values
  • explained clearly what was loaded, generated, or still missing

Reviews

No reviews yet. Tell others what you thought.

Comments

No login needed. Share how it worked for you, ask a question, or note where it did not run.

No comments yet. Be the first to write one.

Comments are published right away. Do not include personal information such as email addresses or phone numbers. Up to 2 URLs.

0 / 1,000 characters

This form is protected by reCAPTCHA, and the Google Privacy Policy and Terms of Service apply.

More skills from this repository

Build/test/lint verification pass for this Flutter app — runs codegen, analyze, test, then iOS + Android native builds in parallel, then `dart format`. Does NOT commit anything; leaves the working tree dirty so the user can review and commit on demand. Used at the end of the prd → techspec → tasks → implement-tasks-sequence flow before `pr-review`, and can also be invoked manually when the user says "verify build", "run full verification", or "check everything".

The English summary is being prepared. Showing the original description.

strvcom/flutter-template24Updated Jun 18, 2026

Create or update a GitHub PR for this Flutter repository using gh CLI. Verifies the work with build-verify and pr-review, generates an inline PR description, commits pending changes when approved, pushes, and opens or updates the PR. Supports stacked PRs by asking for the base branch when detection is ambiguous. Use when the user says "create PR", "open PR", "push PR", or wants to submit their work for review.

The English summary is being prepared. Showing the original description.

strvcom/flutter-template24Updated Jun 18, 2026

Build a full feature in this Flutter repository that includes backend or storage data flow: read API schema, create DTOs, map DTOs to entities, add Riverpod use cases, connect feature state, and render UI data. Use when a task goes beyond a screen and needs real data integration.

The English summary is being prepared. Showing the original description.

strvcom/flutter-template24Updated Jun 18, 2026

Create a new Flutter screen in this repository using the existing feature structure, AutoRoute setup, Riverpod state pattern, and code generation workflow. Use when adding a new page, route, stateful screen, or feature folder in this template.

The English summary is being prepared. Showing the original description.

strvcom/flutter-template24Updated Jun 18, 2026

Implement a single Flutter task following this repository's Riverpod, Freezed, AutoRoute, DTO/entity, codegen, and verification conventions. Reads the task definition, PRD, and tech spec, then executes the implementation. When invoked standalone, verifies the change; when invoked by implement-tasks-sequence, writes code only and leaves verification to start-job/build-verify. Use when the user says "implement task X", "work on task X", or wants to execute a specific task from the task list.

The English summary is being prepared. Showing the original description.

strvcom/flutter-template24Updated Jun 18, 2026

Orchestrates implementation of all tasks for a feature using an agent team. Respects task dependencies, runs tasks in correct order, parallelizes independent tasks. Does NOT build, run tests, or commit at any point — verification is delegated to the caller (typically `/start-job`, which runs `build-verify` and `pr-review uncommitted` afterwards). Use when the user says "implement all tasks", "run the task sequence", "implement the feature", or wants to execute multiple tasks from a task list end-to-end.

The English summary is being prepared. Showing the original description.

strvcom/flutter-template24Updated Jun 18, 2026

See all skills by strvcom

Report a problem with this skill