The Agent Skills Directory

[EXTERNAL_DOWNLOADS]: The skill provides instructions to download official binaries for sops and age from their respective GitHub repositories (github.com/getsops/sops and github.com/FiloSottile/age). These are standard tools for secret management.
[COMMAND_EXECUTION]: The skill utilizes shell commands to install tools (curl, tar, chmod), manage keys (age-keygen), and run applications through a custom secret wrapper (pnpm secrets exec). The wrapper is designed to securely pass environment variables to child processes while stripping sensitive keys from the environment afterwards.
[INDIRECT_PROMPT_INJECTION]: The skill processes environment files that could potentially contain untrusted data.
Ingestion points: Secret files located at secrets/dev.env and secrets/prod.env, as well as the SOPS_AGE_KEY environment variable.
Boundary markers: SOPS includes internal integrity checks (MAC) to ensure files have not been tampered with.
Capability inventory: File system read/write access via the SOPS tool and command execution capabilities through the pnpm secrets exec command.
Sanitization: The wrapper processes secret values as strings and uses standard JSON parsing for environment injection.

using-sops