[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M6FBRMS2WB9C9BK3P0EX6F60":3,"skill-same:01M6FBRMS2WB9C9BK3P0EX6F60":74},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":14,"licenseFileUrl":6,"sourceHtmlUrl":15,"categories":16,"keywords":17,"publishedAt":40,"linkOnly":41,"markdownContent":42,"markdownBody":43,"frontMatter":44,"refName":29,"commitSha":54,"skillDirectory":55,"forksCount":56,"repositoryHtmlUrl":57,"repositoryHomepageUrl":6,"ownerHtmlUrl":58,"ownerBlogUrl":6,"ownerDescription":6,"updatedAt":59,"install":60,"resources":73},"01M6FBRMS2WB9C9BK3P0EX6F60","sops-encryption",null,"Encrypt files and configs with Mozilla SOPS.","boisenoise\u002Fskills-collections","boisenoise","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F193180?v=4","01M6CDBDQK6BDN55ZMA6B6PKBM","01M6CDBDVSJ3JPTBYN26FZ7TZK",12,"MIT","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-sops-encryption\u002FSKILL.md",[],[18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39],"sops","sops encryption","encryption","community","for","with","relevant","helper","scope","critical","active","main","github","files","agent-skills","only","devops","vault","devops-security","license","encrypt","assessment","2026-11-10 10:12:30",false,"---\nname: sops-encryption\ndescription: Encrypt files and configs with Mozilla SOPS.\ncategory: security\nrisk: critical\nsource: https:\u002F\u002Fgithub.com\u002FBagelHole\u002FDevOps-Security-Agent-Skills\nsource_repo: BagelHole\u002FDevOps-Security-Agent-Skills\nsource_type: community\ndate_added: '2026-09-20'\nlicense: MIT\nlicense_source: https:\u002F\u002Fgithub.com\u002FBagelHole\u002FDevOps-Security-Agent-Skills\u002Fblob\u002Fmain\u002FLICENSE\ncompatibility: Requires the relevant security tooling (scanners, vault CLIs) and an\n  authorized scope for any active assessment. Docs-only; helper scripts and templates\n  not bundled.\nmetadata:\n  author: devops-skills\n  version: '1.0'\n---\n\n# SOPS Encryption\n\nEncrypt secrets in configuration files while keeping structure visible.\n\n## When to Use This Skill\n\nUse this skill when:\n- Encrypting secrets in Git\n- Implementing GitOps with secrets\n- Managing Kubernetes secrets as code\n- Encrypting configuration files\n\n## Prerequisites\n\n- SOPS installed\n- KMS access (AWS, GCP, Azure) or PGP key\n\n## Installation\n\n```bash\n# macOS\nbrew install sops\n\n# Linux\n# Choose a supported release for the actual OS\u002Farchitecture.\n# Verify publisher signatures\u002Fchecksums through an independent trusted channel\n# before execution; use an authorized install destination.\n```\n\n## Basic Usage\n\n```bash\n# Encrypt with AWS KMS\nsops --encrypt --kms arn:aws:kms:region:account:key\u002Fkey-id secrets.yaml > secrets.enc.yaml\n\n# Decrypt only into a private authorized destination; never print plaintext in captured logs\n# Review the installed SOPS output options before decrypting\n\n# Edit encrypted file\nsops secrets.enc.yaml\n\n# Encrypt in place\nsops --encrypt --in-place secrets.yaml\n```\n\n## Configuration\n\n```yaml\n# .sops.yaml\ncreation_rules:\n  - path_regex: .*\\.prod\\.yaml$\n    kms: arn:aws:kms:us-east-1:account:key\u002Fprod-key\n  - path_regex: .*\\.dev\\.yaml$\n    kms: arn:aws:kms:us-east-1:account:key\u002Fdev-key\n  - path_regex: .*\n    pgp: fingerprint\n```\n\n## Kubernetes Integration\n\n```yaml\n# encrypted secret\napiVersion: v1\nkind: Secret\nmetadata:\n  name: myapp-secrets\ntype: Opaque\nstringData:\n  password: ENC[AES256_GCM,data:encrypted...]\nsops:\n  kms:\n    - arn: arn:aws:kms:region:account:key\u002Fkey-id\n```\n\n```bash\n# With ArgoCD\n# Install ksops plugin for ArgoCD to decrypt secrets\n```\n\n## Best Practices\n\n- Store .sops.yaml in repository\n- Use different keys per environment\n- Rotate encryption keys regularly\n- Never commit unencrypted secrets\n- Use key aliases for readability\n\n## Related Skills\n\n- hashicorp-vault (`hashicorp-vault`) - Centralized secrets\n- argocd-gitops (`argocd-gitops`) - GitOps integration\n\n## Limitations\n\n- Apply guidance only within authorized scope; test destructive steps in non-production first.\n- Docs-only import: upstream scripts and templates not bundled.\n\n### Example\n\n```bash\n# Read-only first: inventory before any active step.\nwhich \u003Ctool> && \u003Ctool> --help | head -n 20\n```\n\n> Adapted from [BagelHole\u002FDevOps-Security-Agent-Skills](https:\u002F\u002Fgithub.com\u002FBagelHole\u002FDevOps-Security-Agent-Skills) (MIT); frontmatter, When to Use\u002FLimitations, and safety boundaries added for upstream compliance. Docs-only import: helper scripts and templates not bundled.\n\n## Execution boundaries\n\nReview encryption output before replacing originals. Decrypting to stdout can expose secrets in agent\u002Ftool logs. Use synthetic data for validation, restrict output permissions and never commit plaintext. The abbreviated encrypted Kubernetes example is illustrative, not a valid ciphertext to deploy.\n","# SOPS Encryption\n\nEncrypt secrets in configuration files while keeping structure visible.\n\n## When to Use This Skill\n\nUse this skill when:\n- Encrypting secrets in Git\n- Implementing GitOps with secrets\n- Managing Kubernetes secrets as code\n- Encrypting configuration files\n\n## Prerequisites\n\n- SOPS installed\n- KMS access (AWS, GCP, Azure) or PGP key\n\n## Installation\n\n```bash\n# macOS\nbrew install sops\n\n# Linux\n# Choose a supported release for the actual OS\u002Farchitecture.\n# Verify publisher signatures\u002Fchecksums through an independent trusted channel\n# before execution; use an authorized install destination.\n```\n\n## Basic Usage\n\n```bash\n# Encrypt with AWS KMS\nsops --encrypt --kms arn:aws:kms:region:account:key\u002Fkey-id secrets.yaml > secrets.enc.yaml\n\n# Decrypt only into a private authorized destination; never print plaintext in captured logs\n# Review the installed SOPS output options before decrypting\n\n# Edit encrypted file\nsops secrets.enc.yaml\n\n# Encrypt in place\nsops --encrypt --in-place secrets.yaml\n```\n\n## Configuration\n\n```yaml\n# .sops.yaml\ncreation_rules:\n  - path_regex: .*\\.prod\\.yaml$\n    kms: arn:aws:kms:us-east-1:account:key\u002Fprod-key\n  - path_regex: .*\\.dev\\.yaml$\n    kms: arn:aws:kms:us-east-1:account:key\u002Fdev-key\n  - path_regex: .*\n    pgp: fingerprint\n```\n\n## Kubernetes Integration\n\n```yaml\n# encrypted secret\napiVersion: v1\nkind: Secret\nmetadata:\n  name: myapp-secrets\ntype: Opaque\nstringData:\n  password: ENC[AES256_GCM,data:encrypted...]\nsops:\n  kms:\n    - arn: arn:aws:kms:region:account:key\u002Fkey-id\n```\n\n```bash\n# With ArgoCD\n# Install ksops plugin for ArgoCD to decrypt secrets\n```\n\n## Best Practices\n\n- Store .sops.yaml in repository\n- Use different keys per environment\n- Rotate encryption keys regularly\n- Never commit unencrypted secrets\n- Use key aliases for readability\n\n## Related Skills\n\n- hashicorp-vault (`hashicorp-vault`) - Centralized secrets\n- argocd-gitops (`argocd-gitops`) - GitOps integration\n\n## Limitations\n\n- Apply guidance only within authorized scope; test destructive steps in non-production first.\n- Docs-only import: upstream scripts and templates not bundled.\n\n### Example\n\n```bash\n# Read-only first: inventory before any active step.\nwhich \u003Ctool> && \u003Ctool> --help | head -n 20\n```\n\n> Adapted from [BagelHole\u002FDevOps-Security-Agent-Skills](https:\u002F\u002Fgithub.com\u002FBagelHole\u002FDevOps-Security-Agent-Skills) (MIT); frontmatter, When to Use\u002FLimitations, and safety boundaries added for upstream compliance. Docs-only import: helper scripts and templates not bundled.\n\n## Execution boundaries\n\nReview encryption output before replacing originals. Decrypting to stdout can expose secrets in agent\u002Ftool logs. Use synthetic data for validation, restrict output permissions and never commit plaintext. The abbreviated encrypted Kubernetes example is illustrative, not a valid ciphertext to deploy.\n",{"name":5,"risk":27,"source":45,"license":14,"category":46,"metadata":47,"date_added":50,"description":7,"source_repo":51,"source_type":21,"compatibility":52,"license_source":53},"https:\u002F\u002Fgithub.com\u002FBagelHole\u002FDevOps-Security-Agent-Skills","security",{"author":48,"version":49},"devops-skills","1.0","2026-09-20","BagelHole\u002FDevOps-Security-Agent-Skills","Requires the relevant security tooling (scanners, vault CLIs) and an authorized scope for any active assessment. Docs-only; helper scripts and templates not bundled.","https:\u002F\u002Fgithub.com\u002FBagelHole\u002FDevOps-Security-Agent-Skills\u002Fblob\u002Fmain\u002FLICENSE","7bf2279c8a65758319526a721d5c4b75683aec9c","skills\u002Fantigravity-sops-encryption",3,"https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections","https:\u002F\u002Fgithub.com\u002Fboisenoise","2026-11-12 14:21:24",{"source":8,"skillName":5,"commands":61,"prompt":71,"zipAvailable":72},[62,65,68],{"tool":63,"command":64},"npx","npx skills add boisenoise\u002Fskills-collections --skill sops-encryption",{"tool":66,"command":67},"bunx","bunx skills add boisenoise\u002Fskills-collections --skill sops-encryption",{"tool":69,"command":70},"pnpm","pnpm dlx skills add boisenoise\u002Fskills-collections --skill sops-encryption","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-sops-encryption\u002FSKILL.md",true,[],[75,103,128,153,172,195],{"skillNo":76,"name":77,"nameZh":6,"description":78,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":79,"licenseFileUrl":80,"sourceHtmlUrl":81,"categories":82,"keywords":83,"publishedAt":40},"01M6WNH92BHVFXHGPDZCPJ0AG0","web-access","Use Treg for public web or platform data only when existing search, browser and connected tools cannot cover the task, with explicit cost and data boundaries.","Apache-2.0","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-web-access\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-web-access\u002FSKILL.md",[],[84,85,86,87,88,89,90,91,92,93,94,33,95,96,97,27,98,99,100,101,102],"web","access","web access","official","development","browser","search","data","Tools","read","fetch","youtube","free tools","platform","free","cover","normal","when","2026",{"skillNo":104,"name":105,"nameZh":6,"description":106,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":79,"licenseFileUrl":107,"sourceHtmlUrl":108,"categories":109,"keywords":115,"publishedAt":40},"01M6WNF9XAYAB2CZDDJBAKNM93","treg","Use the Treg CLI or MCP catalog to discover, price and call authorized external tools with team-scoped credentials and a user-approved budget.","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-treg\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-treg\u002FSKILL.md",[110],{"categoryNo":111,"categoryName":112,"taxonomyType":113,"taxonomyTypeDesc":114},"01JBSEEDCAT000000000000023","Skill与智能体开发","SCENARIO","使用场景",[105,116,117,30,87,88,37,92,118,119,120,121,122,123,124,27,125,23,126,127,102],"MCP","cli","Budget","credentials","team","catalog","use","call","discover","external tools","scoped","blob",{"skillNo":129,"name":130,"nameZh":6,"description":131,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":79,"licenseFileUrl":132,"sourceHtmlUrl":133,"categories":134,"keywords":140,"publishedAt":40},"01M6WN93MEAZ4E41DYAHJRPHQT","recruit","Turn a job description into an evidence-linked candidate shortlist through Treg, with job-related ranking and optional authorized business contact enrichment.","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-recruit\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-recruit\u002FSKILL.md",[135],{"categoryNo":136,"categoryName":137,"taxonomyType":138,"taxonomyTypeDesc":139},"01JBSEEDCAT000000000000038","人力资源","PROFESSION","适用职业",[130,30,87,37,141,142,143,144,145,146,27,147,148,149,23,22,150,151,152,127,105,102],"https","email","enrichment","business","evidence","phone","ranking","post","job description","person","candidate","reason",{"skillNo":154,"name":155,"nameZh":6,"description":156,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":79,"licenseFileUrl":157,"sourceHtmlUrl":158,"categories":159,"keywords":160,"publishedAt":40},"01M6WN8R5RXSMHM9B4D9FAFX42","rea-growth","Analyze a company’s public growth and content through Treg, distinguish observations from hypotheses, and produce an evidence-linked playbook within an approved budget.","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-rea-growth\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-rea-growth\u002FSKILL.md",[],[161,162,163,30,87,37,164,165,141,166,118,167,168,169,145,27,170,171,127,105,102],"growth","rea","rea growth","produce","content","playbook","marketing","analyze","public","observations","company",{"skillNo":173,"name":174,"nameZh":6,"description":175,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":79,"licenseFileUrl":176,"sourceHtmlUrl":177,"categories":178,"keywords":179,"publishedAt":40},"01M6WN2EVE3RQRGWAKBT4S7YT2","make-ugc","Create original AI UGC-style product videos through Treg: research hooks, approve a licensed presenter and voice, generate clips, add captions and report costs.","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-make-ugc\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-make-ugc\u002FSKILL.md",[],[180,181,30,182,87,183,37,184,185,186,187,188,27,189,190,191,192,193,194,127],"make","make ugc","research","create","Video","Captions","ads","short","hooks","head","style","niche","trending","talking-head","approve",{"skillNo":196,"name":197,"nameZh":6,"description":198,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":6,"repositoryNo":12,"starsCount":13,"licenseSpdxId":79,"licenseFileUrl":199,"sourceHtmlUrl":200,"categories":201,"keywords":202,"publishedAt":40},"01M6WN10ARAA63Y8K1YNGXJ2RM","lead-signals","Find and qualify public buying signals through Treg, rank fitting business accounts and optionally enrich authorized business contact information.","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-lead-signals\u002FLICENSE","https:\u002F\u002Fgithub.com\u002Fboisenoise\u002Fskills-collections\u002Fblob\u002Fmain\u002Fskills\u002Fantigravity-lead-signals\u002FSKILL.md",[],[203,204,205,30,87,37,206,207,144,208,209,27,210,211,212,213,214,215,216,127],"signals","lead","lead signals","how","find","ready","as","how to","qualify","people","information","enrich","changes","funding"]