跳到正文
cccskills
免费在 GitHub 公开

secrets-bootstrap

Safely work with encrypted secrets, environment files, and signing material in this repository. Use when a task requires loading, decrypting, validating, or explaining the repo's secrets and signing setup.

中文简介正在准备中。当前显示原文说明。

查看安装方法

包含的文件(1)

  • SKILL.md2.0 KB

SKILL.md(原文)

安装前可以查看交给 AI 代理的指令内容。

Flutter Template Secrets Bootstrap

Use this skill when a task requires secret handling in this repository.

Read First

  • AGENTS.md
  • README.md
  • extras/secrets/tools/
  • android/extras/keystores/README.md
  • makefile

Safety Rule

Do not touch secrets unless the task clearly requires it.

That includes:

  • .env
  • .env-development
  • .env-staging
  • .env-production
  • keystore files
  • encrypted secret files in extras/secrets/
  • generated iOS config files

Workflow

  1. Confirm why secret access is needed.
  2. Inspect the existing secret-loading scripts instead of improvising commands.
  3. Prefer existing make targets and scripts:
    • make secretsDecrypt
    • make secretsEncrypt
    • make secretsClean
  4. Keep encrypted files and generated decrypted files conceptually separate.
  5. Avoid logging secret values in output, comments, or diffs.
  6. If a task only needs to know whether a value exists, verify presence without printing contents.

Repo Notes

  • Secret tooling lives under extras/secrets/tools/.
  • README documents the expected age and sops flow.
  • Android keystore guidance has its own README.
  • Environment files are referenced by pubspec.yaml and loaded by flavor in lib/app/setup/setup_app.dart.

When To Stop And Ask

  • the task needs a missing secret
  • the task would rotate or overwrite encrypted files
  • the task would expose secret contents in logs or committed files
  • the task needs signing or distribution credentials that are not already available

Completion Criteria

  • used existing scripts or make targets where possible
  • avoided exposing sensitive values
  • explained clearly what was loaded, generated, or still missing

评价

还没有评价。欢迎分享你的使用感受。

评论

无需登录即可发表。欢迎分享使用感受、提问,或说明在哪些环境下无法运行。

还没有评论。来写第一条吧。

提交后会立即公开。请勿填写邮箱、电话等个人信息。URL 最多 2 个。

0 / 1000 字

此表单受 reCAPTCHA 保护,适用 Google 的隐私权政策和服务条款。

同一仓库的技能

Build/test/lint verification pass for this Flutter app — runs codegen, analyze, test, then iOS + Android native builds in parallel, then `dart format`. Does NOT commit anything; leaves the working tree dirty so the user can review and commit on demand. Used at the end of the prd → techspec → tasks → implement-tasks-sequence flow before `pr-review`, and can also be invoked manually when the user says "verify build", "run full verification", or "check everything".

中文简介正在准备中。当前显示原文说明。

strvcom/flutter-template242026年6月18日 更新

create-pr

免费

Create or update a GitHub PR for this Flutter repository using gh CLI. Verifies the work with build-verify and pr-review, generates an inline PR description, commits pending changes when approved, pushes, and opens or updates the PR. Supports stacked PRs by asking for the base branch when detection is ambiguous. Use when the user says "create PR", "open PR", "push PR", or wants to submit their work for review.

中文简介正在准备中。当前显示原文说明。

strvcom/flutter-template242026年6月18日 更新

Build a full feature in this Flutter repository that includes backend or storage data flow: read API schema, create DTOs, map DTOs to entities, add Riverpod use cases, connect feature state, and render UI data. Use when a task goes beyond a screen and needs real data integration.

中文简介正在准备中。当前显示原文说明。

strvcom/flutter-template242026年6月18日 更新

Create a new Flutter screen in this repository using the existing feature structure, AutoRoute setup, Riverpod state pattern, and code generation workflow. Use when adding a new page, route, stateful screen, or feature folder in this template.

中文简介正在准备中。当前显示原文说明。

strvcom/flutter-template242026年6月18日 更新

implement

免费

Implement a single Flutter task following this repository's Riverpod, Freezed, AutoRoute, DTO/entity, codegen, and verification conventions. Reads the task definition, PRD, and tech spec, then executes the implementation. When invoked standalone, verifies the change; when invoked by implement-tasks-sequence, writes code only and leaves verification to start-job/build-verify. Use when the user says "implement task X", "work on task X", or wants to execute a specific task from the task list.

中文简介正在准备中。当前显示原文说明。

strvcom/flutter-template242026年6月18日 更新

Orchestrates implementation of all tasks for a feature using an agent team. Respects task dependencies, runs tasks in correct order, parallelizes independent tasks. Does NOT build, run tests, or commit at any point — verification is delegated to the caller (typically `/start-job`, which runs `build-verify` and `pr-review uncommitted` afterwards). Use when the user says "implement all tasks", "run the task sequence", "implement the feature", or wants to execute multiple tasks from a task list end-to-end.

中文简介正在准备中。当前显示原文说明。

strvcom/flutter-template242026年6月18日 更新

查看 strvcom 的全部技能

报告此技能的问题