The Agent Skills Directory

[COMMAND_EXECUTION]: The skill utilizes shell commands (fish syntax) for secret management and environment configuration, including varlock keychain set, sops --decrypt, and git check-ignore. It defines a wrapper pattern (varlock run -- <command>) to inject environment variables into application processes.
[EXTERNAL_DOWNLOADS]: The documentation instructs on the installation of standard developer tools and security utilities like sops, age, age-plugin-sshagent, and go. It also suggests the use of standard package runners such as npx, bunx, and uvx for toolchain management.
[DYNAMIC_EXECUTION]: The skill references Varlock's exec() resolver capability, which allows for dynamic secret retrieval via shell commands (e.g., querying the macOS Keychain). This is explicitly documented as a mechanism for local secret resolution.
[SAFE]: The instructions strongly advocate for secure secret handling, including the use of system-level Keychains, gitignoring sensitive files, and performing redacted validation checks to ensure secrets are never printed to logs or the console.

jb-dev-env