[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M79CZMZZ9DA63DVAW2CTEXZ7":3,"skill-same:01M79CZMZZ9DA63DVAW2CTEXZ7":52},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":19,"linkOnly":20,"markdownContent":21,"markdownBody":22,"frontMatter":23,"refName":24,"commitSha":25,"skillDirectory":26,"forksCount":27,"repositoryHtmlUrl":28,"repositoryHomepageUrl":6,"ownerHtmlUrl":29,"ownerBlogUrl":6,"ownerDescription":30,"updatedAt":31,"install":32,"resources":45},"01M79CZMZZ9DA63DVAW2CTEXZ7","macos-keychain-secrets",null,"MUST invoke when selecting, storing, rotating, or safely consuming a developer-laptop credential through macOS Keychain, a Linux secret store, or Windows Credential Manager. Use when a credential must stay out of transcripts, command arguments, output, and repository files. Do NOT invoke to access a real secret, manage production or shared secrets, or replace a CLI's built-in credential store.","JanMichaelSE\u002Fagentic-marketplace","JanMichaelSE","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F55473580?v=4","01M79CW862FGHY91NG8DDRRFJC","Jan M Montalvo","01M79CW86M2NJQNRZ41VP9AJ51",1,"Apache-2.0","https:\u002F\u002Fgithub.com\u002FJanMichaelSE\u002Fagentic-marketplace\u002Fblob\u002Fmain\u002Fplugins\u002Fkeychain\u002Fskills\u002Fmacos-keychain-secrets\u002FSKILL.md",[],[],"2026-11-15 14:19:17",false,"---\nname: macos-keychain-secrets\ndescription: MUST invoke when selecting, storing, rotating, or safely consuming a developer-laptop credential through macOS Keychain, a Linux secret store, or Windows Credential Manager. Use when a credential must stay out of transcripts, command arguments, output, and repository files. Do NOT invoke to access a real secret, manage production or shared secrets, or replace a CLI's built-in credential store.\n---\n\n# Local Secret Store Guidance\n\nUse this skill to plan safe, local handling of a developer credential. It is guidance only: do not invoke credential tools or ask the developer to reveal a credential value.\n\n## Scope boundary\n\nUse an OS-native store only for an individual developer laptop. Production, deployment, shared, service, or auditable credentials belong in an approved secrets-management service. Prefer a tool's built-in authenticated session when it has one; do not copy its credential into another store without a clear need.\n\n## Non-negotiable rules\n\n- Never request, receive, print, log, compare, or persist a credential value.\n- Never place a value in a command argument, shell history, transcript, repository file, ticket, pull request, or diagnostic output.\n- Never inspect, enumerate, or change existing credential entries on the developer's behalf.\n- Stop if safe value handling is unavailable; do not fall back to a plaintext file, `.env` file, or shell export.\n- Treat an accidental value disclosure as a security incident: stop, avoid repeating it, and direct the developer to revoke or rotate the credential through its issuing service.\n\n## Choose a local store\n\n| Platform | Primary choice | Supported alternative | Developer action |\n| --- | --- | --- | --- |\n| macOS | Keychain Access or macOS Keychain | `security` only for non-secret metadata or an interaction that does not expose the value | The developer performs the sensitive entry locally. |\n| Linux | Desktop Secret Service | `pass` when already configured by the developer | The developer uses the existing local secret-store workflow. |\n| Windows | Credential Manager | A supported PowerShell credential API that preserves secure input | The developer performs the sensitive entry locally. |\n\nDo not install a secret-store package or module as part of this skill. If no suitable local store is available, ask the developer to choose and configure one outside this workflow.\n\n## Naming and lifecycle\n\nIdentify an entry with a non-sensitive `(service, account)` pair:\n\n- `service`: the system the credential authenticates to.\n- `account`: the developer identity or non-sensitive local scope.\n\nRecord only these identifiers and any non-sensitive expiration reminder. The agent can help prepare a rotation checklist, but the developer must reissue the remote credential and update the local entry without revealing the value.\n\n## Safe consumption\n\nBefore a credential is used, confirm that the consuming application supports a value-safe mechanism, such as its own credential-store integration, secure interactive input, or a documented protected handoff. The mechanism must not place the value in command-line arguments, output, or a repository file.\n\nIf a tool requires the value to be displayed, copied into a command, committed to a file, or passed through an agent transcript, stop and select a safer integration or ask the tool owner for one.\n\n## Response checklist\n\n1. Confirm the credential is limited to a developer laptop and is not shared or production-scoped.\n2. Choose the platform's local store and a non-sensitive `(service, account)` identifier.\n3. Direct the developer to perform sensitive entry or rotation locally without sharing the value.\n4. Confirm the consuming tool has a value-safe integration.\n5. Report only the chosen store, identifier, and next safe action; never report credential content or store output.","# Local Secret Store Guidance\n\nUse this skill to plan safe, local handling of a developer credential. It is guidance only: do not invoke credential tools or ask the developer to reveal a credential value.\n\n## Scope boundary\n\nUse an OS-native store only for an individual developer laptop. Production, deployment, shared, service, or auditable credentials belong in an approved secrets-management service. Prefer a tool's built-in authenticated session when it has one; do not copy its credential into another store without a clear need.\n\n## Non-negotiable rules\n\n- Never request, receive, print, log, compare, or persist a credential value.\n- Never place a value in a command argument, shell history, transcript, repository file, ticket, pull request, or diagnostic output.\n- Never inspect, enumerate, or change existing credential entries on the developer's behalf.\n- Stop if safe value handling is unavailable; do not fall back to a plaintext file, `.env` file, or shell export.\n- Treat an accidental value disclosure as a security incident: stop, avoid repeating it, and direct the developer to revoke or rotate the credential through its issuing service.\n\n## Choose a local store\n\n| Platform | Primary choice | Supported alternative | Developer action |\n| --- | --- | --- | --- |\n| macOS | Keychain Access or macOS Keychain | `security` only for non-secret metadata or an interaction that does not expose the value | The developer performs the sensitive entry locally. |\n| Linux | Desktop Secret Service | `pass` when already configured by the developer | The developer uses the existing local secret-store workflow. |\n| Windows | Credential Manager | A supported PowerShell credential API that preserves secure input | The developer performs the sensitive entry locally. |\n\nDo not install a secret-store package or module as part of this skill. If no suitable local store is available, ask the developer to choose and configure one outside this workflow.\n\n## Naming and lifecycle\n\nIdentify an entry with a non-sensitive `(service, account)` pair:\n\n- `service`: the system the credential authenticates to.\n- `account`: the developer identity or non-sensitive local scope.\n\nRecord only these identifiers and any non-sensitive expiration reminder. The agent can help prepare a rotation checklist, but the developer must reissue the remote credential and update the local entry without revealing the value.\n\n## Safe consumption\n\nBefore a credential is used, confirm that the consuming application supports a value-safe mechanism, such as its own credential-store integration, secure interactive input, or a documented protected handoff. The mechanism must not place the value in command-line arguments, output, or a repository file.\n\nIf a tool requires the value to be displayed, copied into a command, committed to a file, or passed through an agent transcript, stop and select a safer integration or ask the tool owner for one.\n\n## Response checklist\n\n1. Confirm the credential is limited to a developer laptop and is not shared or production-scoped.\n2. Choose the platform's local store and a non-sensitive `(service, account)` identifier.\n3. Direct the developer to perform sensitive entry or rotation locally without sharing the value.\n4. Confirm the consuming tool has a value-safe integration.\n5. Report only the chosen store, identifier, and next safe action; never report credential content or store output.",{"name":5,"description":7},"main","d9e185f133b5cbcd785341095a241d0c64d8310d","plugins\u002Fkeychain\u002Fskills\u002Fmacos-keychain-secrets",0,"https:\u002F\u002Fgithub.com\u002FJanMichaelSE\u002Fagentic-marketplace","https:\u002F\u002Fgithub.com\u002FJanMichaelSE","Software Developer | B.S. Computer Science ","2026-11-14 06:36:51",{"source":8,"skillName":5,"commands":33,"prompt":43,"zipAvailable":44},[34,37,40],{"tool":35,"command":36},"npx","npx skills add JanMichaelSE\u002Fagentic-marketplace --skill macos-keychain-secrets",{"tool":38,"command":39},"bunx","bunx skills add JanMichaelSE\u002Fagentic-marketplace --skill macos-keychain-secrets",{"tool":41,"command":42},"pnpm","pnpm dlx skills add JanMichaelSE\u002Fagentic-marketplace --skill macos-keychain-secrets","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002FJanMichaelSE\u002Fagentic-marketplace\u002Fblob\u002Fmain\u002Fplugins\u002Fkeychain\u002Fskills\u002Fmacos-keychain-secrets\u002FSKILL.md",true,[46],{"path":47,"resourceType":48,"resourceTypeDesc":49,"sizeBytes":50,"sourceHtmlUrl":51},"agents\u002Fopenai.yaml","REFERENCE","参考文档",118,"https:\u002F\u002Fgithub.com\u002FJanMichaelSE\u002Fagentic-marketplace\u002Fblob\u002Fmain\u002Fplugins\u002Fkeychain\u002Fskills\u002Fmacos-keychain-secrets\u002Fagents\u002Fopenai.yaml",[53,60,67,74,81,88],{"skillNo":54,"name":55,"nameZh":6,"description":56,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":57,"categories":58,"keywords":59,"publishedAt":19},"01M79D1SP72BJKFZDHH2W0VT9G","ui-ux-pro-max","UI\u002FUX design intelligence for web and mobile. Local database with 79 searchable styles (88 catalog entries), 192 color palettes, 74 font pairings, 192 product types, 119 UX guidelines, 105 curated icon entries, 17 GSAP motion presets, and 25 chart types across 22 stacks (React, Next.js, Vue, Nuxt, Svelte, Astro, SwiftUI, React Native, Flutter, Tailwind, shadcn\u002Fui, Jetpack Compose, Angular, Laravel, JavaFX, WPF, WinUI, Avalonia, Uno Platform, UWP, Three.js, and HTML\u002FCSS). Use when designing, building, or reviewing UI: pages, components, color schemes, typography, layout, accessibility, animation, or data visualization.","https:\u002F\u002Fgithub.com\u002FJanMichaelSE\u002Fagentic-marketplace\u002Fblob\u002Fmain\u002Fplugins\u002Fui-ux\u002Fskills\u002Fui-ux-pro-max\u002FSKILL.md",[],[],{"skillNo":61,"name":62,"nameZh":6,"description":63,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":64,"categories":65,"keywords":66,"publishedAt":19},"01M79D1NPRNKYC0GNSPQBG02AD","figma-mcp","Implement or compare UI against Figma designs using an available Figma MCP integration. Use for Figma-backed implementation, design-token extraction, or visual-parity gap analysis; Figma MCP access is optional and must already be configured by the user.","https:\u002F\u002Fgithub.com\u002FJanMichaelSE\u002Fagentic-marketplace\u002Fblob\u002Fmain\u002Fplugins\u002Fui-ux\u002Fskills\u002Ffigma-mcp\u002FSKILL.md",[],[],{"skillNo":68,"name":69,"nameZh":6,"description":70,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":71,"categories":72,"keywords":73,"publishedAt":19},"01M79D1HW8E8EBKHYD0VRPAGDB","improve-codebase-architecture","Find evidence-based, active-change architecture improvements using shared design and domain-modeling guidance. Use when a user wants to reduce architectural friction, deepen a module, or make a current change safer, more testable, and easier to navigate.","https:\u002F\u002Fgithub.com\u002FJanMichaelSE\u002Fagentic-marketplace\u002Fblob\u002Fmain\u002Fplugins\u002Fsoftware-architecture\u002Fskills\u002Fimprove-codebase-architecture\u002FSKILL.md",[],[],{"skillNo":75,"name":76,"nameZh":6,"description":77,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":78,"categories":79,"keywords":80,"publishedAt":19},"01M79D1E9DJ22BZN68FGNEY6H9","domain-modeling","Build and sharpen a project's domain model. Use when discussing codebase terminology, writing or editing GLOSSARY.md or CONTEXT.md, or recording or editing an ADR.","https:\u002F\u002Fgithub.com\u002FJanMichaelSE\u002Fagentic-marketplace\u002Fblob\u002Fmain\u002Fplugins\u002Fsoftware-architecture\u002Fskills\u002Fdomain-modeling\u002FSKILL.md",[],[],{"skillNo":82,"name":83,"nameZh":6,"description":84,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":85,"categories":86,"keywords":87,"publishedAt":19},"01M79D1BWY6DT3SDNRVRJV73PH","codebase-design","Provide the shared vocabulary and discipline for designing deep modules with clear interfaces and seams. Use when a user wants to design or improve a module, find deepening opportunities, choose a seam, or make code more testable and AI-navigable.","https:\u002F\u002Fgithub.com\u002FJanMichaelSE\u002Fagentic-marketplace\u002Fblob\u002Fmain\u002Fplugins\u002Fsoftware-architecture\u002Fskills\u002Fcodebase-design\u002FSKILL.md",[],[],{"skillNo":89,"name":90,"nameZh":6,"description":91,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":92,"categories":93,"keywords":94,"publishedAt":19},"01M79D176DSM0779MS5PCW022A","test-coverage-review","MUST invoke to review whether added or updated tests cover code changes in a diff. Checks new logic, branches, error paths, and regression risk, producing a change-to-test matrix. Use requirements-to-tests-traceability for acceptance-criteria mapping and orchestrated-review for bundled reviews.","https:\u002F\u002Fgithub.com\u002FJanMichaelSE\u002Fagentic-marketplace\u002Fblob\u002Fmain\u002Fplugins\u002Freview-toolkit\u002Fskills\u002Ftest-coverage-review\u002FSKILL.md",[],[]]