免费在 GitHub 公开

config-secrets-environments

Design, audit, and verify configuration, environment separation, secrets, BYOK flows, key rotation, config schema validation, and drift checks across local, dev, staging, and production. Use when adding env vars, changing runtime config, handling API keys or user-provided keys, diagnosing config drift, or preparing deploy/release configuration.

中文简介正在准备中。当前显示原文说明。

majiayu000/spellbook

查看安装方法

包含的文件（2）

SKILL.md1.9 KB
agents/openai.yaml250 B

SKILL.md（原文）

安装前可以查看交给 AI 代理的指令内容。

Config Secrets Environments

Purpose

Use this skill when behavior depends on configuration or secrets. The goal is explicit config ownership, validation, and environment parity without exposing credentials.

Inventory

Collect:

Config files and env var declarations.
Runtime readers and startup wiring.
Secret sources: env, secret manager, local keychain, BYOK storage.
Environment matrix: local, test, dev, staging, prod.
Rotation, revocation, and audit requirements.
Existing .env.example, schema, docs, and CI checks.

Never print real secrets. Redact values and report only names, source type, and wiring status.

Design Rules

Define a schema for required and optional config.
Fail closed for missing critical config; do not silently fall back to insecure or broad behavior.
Keep defaults safe for local development and explicit for production.
Separate build-time and runtime config.
Keep tenant/user-provided keys isolated from platform keys.
Document rotation and revocation paths.
Verify config is wired into startup, not only declared.

Environment Matrix

Use this shape:

Key	Local	Test	Staging	Prod	Secret?	Owner	Rotation

Mark unknown values as unknown. Do not infer a production value from local files.

Output Shape

config_inventory:
environment_matrix:
secret_flows:
validation_and_startup_wiring:
drift_checks:
rotation_plan:
failure_behavior:
verification_commands:

评价

还没有评价。欢迎分享你的使用感受。

无需登录即可发表。欢迎分享使用感受、提问，或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

同一仓库的技能

agentsmd-optimize

免费

Audit and organize AI coding-agent instructions, including AGENTS.md, CLAUDE.md, skills, and agent definitions. Use when the user asks to diagnose conflicting instructions, excessive approval pauses, broad skill triggers, duplicate guidance, or broken instruction references, or to clean up that instruction set. Ordinary code review, Markdown editing, or application debugging alone does not trigger this workflow. Inspection stays read-only; apply changes when authorized.

中文简介正在准备中。当前显示原文说明。