The Agent Skills Directory

[SAFE]: The skill promotes secure practices for handling sensitive credentials and environment variables within a development workflow.
[DATA_EXPOSURE]: The skill identifies sensitive environment files (e.g., .env.keys, .env.prod) and credentials (API keys, tokens) but strictly mandates encryption via dotenvx and Git exclusion (gitignore) for private keys to prevent data exposure.
[COMMAND_EXECUTION]: The instructions direct the agent to use dotenvx and pnpm for managing secrets and executing the local development stack across different environments (local, dev, staging, prod).
[EXTERNAL_DOWNLOADS]: The skill references the dotenvx CLI and Dotenv Armor cloud service as the primary tools for secret synchronization and management.
[INDIRECT_PROMPT_INJECTION]: The skill defines a process for handling user-provided secrets.
Ingestion points: User-pasted keys, tokens, or secrets provided during interaction.
Boundary markers: Explicit instructions to store secrets immediately using dotenvx set without echoing or saving them in plaintext.
Capability inventory: Shell command execution for dotenvx, pnpm, and bun utilities.
Sanitization: Mandatory encryption of external content before it is committed or stored in local files.

dotenvx-secrets