[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"skill:01M7AGFT72DBDAFDCCS2SCY12Q":3,"skill-same:01M7AGFT72DBDAFDCCS2SCY12Q":53},{"skillNo":4,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":16,"categories":17,"keywords":18,"publishedAt":19,"linkOnly":20,"markdownContent":21,"markdownBody":22,"frontMatter":23,"refName":29,"commitSha":30,"skillDirectory":31,"forksCount":32,"repositoryHtmlUrl":33,"repositoryHomepageUrl":34,"ownerHtmlUrl":35,"ownerBlogUrl":36,"ownerDescription":37,"updatedAt":38,"install":39,"resources":52},"01M7AGFT72DBDAFDCCS2SCY12Q","secretzero",null,"Compatibility entrypoint for SecretZero skills. Enforces the absolute rule:\nnever consume secrets in agent context — use SecretZero for all secret\nhandling. Routes to secretzero-author, secretzero-agent, secretzero-handle,\nand secretzero-agent-adopt.","zloeber\u002FSecretZero","zloeber","https:\u002F\u002Favatars.githubusercontent.com\u002Fu\u002F4702624?v=4","01M7AGCEQ32CCAQKAJJ3NS7BE3","Zachary Loeber","01M7AGCEQV5M7FRW8FYTJQAM64",8,"Apache-2.0","https:\u002F\u002Fgithub.com\u002Fzloeber\u002FSecretZero\u002Fblob\u002Fmain\u002Fsrc\u002Fsecretzero\u002Fdata\u002Fskills\u002Fsecretzero\u002FSKILL.md",[],[],"2026-11-15 14:19:17",false,"---\nname: secretzero\ndescription: |\n  Compatibility entrypoint for SecretZero skills. Enforces the absolute rule:\n  never consume secrets in agent context — use SecretZero for all secret\n  handling. Routes to secretzero-author, secretzero-agent, secretzero-handle,\n  and secretzero-agent-adopt.\nlicense: Apache-2.0\ncompatibility: Requires SecretZero CLI (Python 3.12+). Optional MCP extra for sz_* tools in agent hosts.\nmetadata:\n  author: secretzero\n  version: \"1.1\"\nallowed-tools: Bash(secretzero:*) Read\n---\n\n# SecretZero Skill Router\n\nThis skill is retained for backwards compatibility and publishing stability.\nUse one of the focused skills below for all new work.\n\n## Absolute rule: SecretZero only — never secrets in context\n\n**Agents must never consume secret values in LLM or tool context.** That includes reading, receiving, pasting, transcribing, “debugging with,” summarizing, or inferring plaintext from files the user shares in chat.\n\n**Use SecretZero entirely for secrets handling** — discovery, authoring, validation, seeding, sync, rotate, drift, and human entry. The agent orchestrates **metadata-only** CLI\u002FAPI\u002FMCP results; SecretZero and approved human surfaces hold the values.\n\n| Forbidden | Use instead |\n|-----------|-------------|\n| User pastes API keys\u002Fpasswords into chat | `secretzero agent sync --web`, `secretzero web`, or Vector 1 instructions |\n| `read_file` \u002F grep \u002F cat on `.env`, `.env.*`, `*.pem`, credential files | `secretzero detect`, `discover`, `ingest preseed`, or MCP **`sz_discover`** (metadata \u002F hashes only) |\n| `secretzero get --reveal`, `render`, `backup restore --print` under agents | `agent sync --json`, **`sz_status`** \u002F `status`, `list secrets`, lockfile hashes |\n| MCP sampling or host-LLM scans over secret file contents | **`sz_discover`** \u002F `secretzero discover` \u002F `detect` (names, paths, confidence — no values) |\n| Putting literals in `Secretfile.yml` during agent authoring | `null`, `${VAR}`, `.szvar`; `SZ_AGENT_MODE=true` + `secretzero-handle` |\n\nOn spill-sensitive hosts set **`SZ_AGENT_MODE=true`** (see `skills\u002Fsecretzero-handle\u002FSKILL.md`). The MCP server (`secretzero-mcp`) sets this by default when unset. All focused skills below inherit this rule.\n\n## MCP-capable hosts\n\nWhen the agent host registers **`secretzero-mcp`** (see `docs\u002Fmcp-setup.md`):\n\n| Task | Skill | MCP tools |\n|------|-------|-----------|\n| Author \u002F edit `Secretfile.yml` | `secretzero-author` | `sz_discover`, then CLI `validate` \u002F edit |\n| Bootstrap \u002F seed pending secrets | `secretzero-agent` | **CLI\u002FAPI only** — `agent sync --json [--web]` (not on MCP) |\n| Status, sync, rotate, drift | `secretzero-agent` | `sz_status`, `sz_sync`, `sz_rotate`, `sz_drift_check` |\n| `.env` \u002F spill-safe file workflows | `secretzero-handle` | MCP inherits `SZ_AGENT_MODE`; use `sz_discover` + `ingest preseed` via CLI |\n\nInstall: `uv tool install -U \"secretzero[mcp]\"` then `secretzero mcp config generate --workspace \u002Fpath\u002Fto\u002Frepo`.\n\n## Use `secretzero-author` when\n\n- Creating or editing `Secretfile.yml` (guided: manifest root, inventory table, add\u002Fedit loop, optional `detect`\u002F`discover`, optional `secretzero web`; Hermes + MCP notes in skill).\n- Discovering valid generator\u002Ftarget kinds: `secretzero catalog --format json` (machine-complete registry).\n- Performing schema-first, high-quality manifest authoring.\n- Doing safe, contextless discovery and `.szvar` environment breakout.\n- Adding least-privilege provider identity policy binding for targets.\n\nFile: `skills\u002Fsecretzero-author\u002FSKILL.md`\n\n## Use `secretzero-agent` when\n\n- Running agentic sync workflows (Vector 1\u002F2\u002F3).\n- Operating CLI\u002FAPI\u002FMCP orchestration flows (`sz_status`, `sz_sync`, `sz_rotate`, `sz_drift_check`).\n- Managing secure human-in-the-loop runtime scenarios.\n- Handling install\u002Fonboarding\u002Fautomation checks.\n\nFile: `skills\u002Fsecretzero-agent\u002FSKILL.md`\n\n## Universal installation baseline\n\n```bash\nuv tool install -U \"secretzero[all]\"\n```\n\nFor MCP hosts add the `mcp` extra: `uv tool install -U \"secretzero[mcp]\"`.\n\nThe focused skills include detailed workflows, safety rules, and usage examples.\n","# SecretZero Skill Router\n\nThis skill is retained for backwards compatibility and publishing stability.\nUse one of the focused skills below for all new work.\n\n## Absolute rule: SecretZero only — never secrets in context\n\n**Agents must never consume secret values in LLM or tool context.** That includes reading, receiving, pasting, transcribing, “debugging with,” summarizing, or inferring plaintext from files the user shares in chat.\n\n**Use SecretZero entirely for secrets handling** — discovery, authoring, validation, seeding, sync, rotate, drift, and human entry. The agent orchestrates **metadata-only** CLI\u002FAPI\u002FMCP results; SecretZero and approved human surfaces hold the values.\n\n| Forbidden | Use instead |\n|-----------|-------------|\n| User pastes API keys\u002Fpasswords into chat | `secretzero agent sync --web`, `secretzero web`, or Vector 1 instructions |\n| `read_file` \u002F grep \u002F cat on `.env`, `.env.*`, `*.pem`, credential files | `secretzero detect`, `discover`, `ingest preseed`, or MCP **`sz_discover`** (metadata \u002F hashes only) |\n| `secretzero get --reveal`, `render`, `backup restore --print` under agents | `agent sync --json`, **`sz_status`** \u002F `status`, `list secrets`, lockfile hashes |\n| MCP sampling or host-LLM scans over secret file contents | **`sz_discover`** \u002F `secretzero discover` \u002F `detect` (names, paths, confidence — no values) |\n| Putting literals in `Secretfile.yml` during agent authoring | `null`, `${VAR}`, `.szvar`; `SZ_AGENT_MODE=true` + `secretzero-handle` |\n\nOn spill-sensitive hosts set **`SZ_AGENT_MODE=true`** (see `skills\u002Fsecretzero-handle\u002FSKILL.md`). The MCP server (`secretzero-mcp`) sets this by default when unset. All focused skills below inherit this rule.\n\n## MCP-capable hosts\n\nWhen the agent host registers **`secretzero-mcp`** (see `docs\u002Fmcp-setup.md`):\n\n| Task | Skill | MCP tools |\n|------|-------|-----------|\n| Author \u002F edit `Secretfile.yml` | `secretzero-author` | `sz_discover`, then CLI `validate` \u002F edit |\n| Bootstrap \u002F seed pending secrets | `secretzero-agent` | **CLI\u002FAPI only** — `agent sync --json [--web]` (not on MCP) |\n| Status, sync, rotate, drift | `secretzero-agent` | `sz_status`, `sz_sync`, `sz_rotate`, `sz_drift_check` |\n| `.env` \u002F spill-safe file workflows | `secretzero-handle` | MCP inherits `SZ_AGENT_MODE`; use `sz_discover` + `ingest preseed` via CLI |\n\nInstall: `uv tool install -U \"secretzero[mcp]\"` then `secretzero mcp config generate --workspace \u002Fpath\u002Fto\u002Frepo`.\n\n## Use `secretzero-author` when\n\n- Creating or editing `Secretfile.yml` (guided: manifest root, inventory table, add\u002Fedit loop, optional `detect`\u002F`discover`, optional `secretzero web`; Hermes + MCP notes in skill).\n- Discovering valid generator\u002Ftarget kinds: `secretzero catalog --format json` (machine-complete registry).\n- Performing schema-first, high-quality manifest authoring.\n- Doing safe, contextless discovery and `.szvar` environment breakout.\n- Adding least-privilege provider identity policy binding for targets.\n\nFile: `skills\u002Fsecretzero-author\u002FSKILL.md`\n\n## Use `secretzero-agent` when\n\n- Running agentic sync workflows (Vector 1\u002F2\u002F3).\n- Operating CLI\u002FAPI\u002FMCP orchestration flows (`sz_status`, `sz_sync`, `sz_rotate`, `sz_drift_check`).\n- Managing secure human-in-the-loop runtime scenarios.\n- Handling install\u002Fonboarding\u002Fautomation checks.\n\nFile: `skills\u002Fsecretzero-agent\u002FSKILL.md`\n\n## Universal installation baseline\n\n```bash\nuv tool install -U \"secretzero[all]\"\n```\n\nFor MCP hosts add the `mcp` extra: `uv tool install -U \"secretzero[mcp]\"`.\n\nThe focused skills include detailed workflows, safety rules, and usage examples.\n",{"name":5,"license":15,"metadata":24,"description":26,"allowed-tools":27,"compatibility":28},{"author":5,"version":25},"1.1","Compatibility entrypoint for SecretZero skills. Enforces the absolute rule:\nnever consume secrets in agent context — use SecretZero for all secret\nhandling. Routes to secretzero-author, secretzero-agent, secretzero-handle,\nand secretzero-agent-adopt.\n","Bash(secretzero:*) Read","Requires SecretZero CLI (Python 3.12+). Optional MCP extra for sz_* tools in agent hosts.","main","a682dba45de8f378811b7c88ac060527ce90a912","src\u002Fsecretzero\u002Fdata\u002Fskills\u002Fsecretzero",0,"https:\u002F\u002Fgithub.com\u002Fzloeber\u002FSecretZero","https:\u002F\u002Fsecret0.com\u002F","https:\u002F\u002Fgithub.com\u002Fzloeber","https:\u002F\u002Fblog.zacharyloeber.com","Infrastructure and cloud solutions architect. Automation engineer. Professional complexity eater.","2026-10-31 22:04:55",{"source":8,"skillName":5,"commands":40,"prompt":50,"zipAvailable":51},[41,44,47],{"tool":42,"command":43},"npx","npx skills add zloeber\u002FSecretZero --skill secretzero",{"tool":45,"command":46},"bunx","bunx skills add zloeber\u002FSecretZero --skill secretzero",{"tool":48,"command":49},"pnpm","pnpm dlx skills add zloeber\u002FSecretZero --skill secretzero","安装技能，技能地址：https:\u002F\u002Fgithub.com\u002Fzloeber\u002FSecretZero\u002Fblob\u002Fmain\u002Fsrc\u002Fsecretzero\u002Fdata\u002Fskills\u002Fsecretzero\u002FSKILL.md",true,[],[54,61,68,75,82,87],{"skillNo":55,"name":56,"nameZh":6,"description":57,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":58,"categories":59,"keywords":60,"publishedAt":19},"01M7AGFNGG84QMWQ97NP7SAQZE","secretzero-handle","Use when the task touches `.env`, dotenv\u002Fjson\u002Fyaml secret files, local `file` targets,\nor any workflow where secret material could enter agent context. Enforces\n`SZ_AGENT_MODE=true` spill-safe CLI usage, ingest preseed, strict manifest validation,\nand safe discovery patterns alongside `secretzero-agent` \u002F `secretzero-author`.","https:\u002F\u002Fgithub.com\u002Fzloeber\u002FSecretZero\u002Fblob\u002Fmain\u002Fsrc\u002Fsecretzero\u002Fdata\u002Fskills\u002Fsecretzero-handle\u002FSKILL.md",[],[],{"skillNo":62,"name":63,"nameZh":6,"description":64,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":65,"categories":66,"keywords":67,"publishedAt":19},"01M7AGFDSKKWBQY3F3KE1DTVCE","secretzero-author","Use when authoring, reviewing, or walking a user through a new or existing\n`Secretfile.yml`. Guided session: manifest root, inventory table, optional\nlocal discovery, add\u002Fedit loop with secret-type and target menus, validate,\noptional `secretzero web`. Hermes + MCP notes included. Safe contextless\ndiscovery, `.szvar` lanes, policy-bound targets. Inherits absolute rule from\n`skills\u002Fsecretzero\u002FSKILL.md`. Co-load `skills\u002Fsecretzero-handle\u002FSKILL.md`\nfor `.env` \u002F spill-safe CLI.","https:\u002F\u002Fgithub.com\u002Fzloeber\u002FSecretZero\u002Fblob\u002Fmain\u002Fsrc\u002Fsecretzero\u002Fdata\u002Fskills\u002Fsecretzero-author\u002FSKILL.md",[],[],{"skillNo":69,"name":70,"nameZh":6,"description":71,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":72,"categories":73,"keywords":74,"publishedAt":19},"01M7AGFAAKHFGJWNPE0R6Q6PT9","secretzero-agent","Use for agentic and operational SecretZero workflows including unified\n`agent sync`, CLI\u002FAPI\u002FMCP parity, secure human-in-the-loop vectors, and\nautomation-safe run loops.","https:\u002F\u002Fgithub.com\u002Fzloeber\u002FSecretZero\u002Fblob\u002Fmain\u002Fsrc\u002Fsecretzero\u002Fdata\u002Fskills\u002Fsecretzero-agent\u002FSKILL.md",[],[],{"skillNo":76,"name":77,"nameZh":6,"description":78,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":79,"categories":80,"keywords":81,"publishedAt":19},"01M7AGF6EQTHKAE55FJA8M23PM","secretzero-agent-adopt","Use for agent runtime integration: discover Hermes\u002FOpenClaw installs,\nbootstrap SecretZero environments with `secretzero agent list` \u002F `agent adopt`,\nlockfile preseed, and restore loops. Inherits absolute rule from\n`skills\u002Fsecretzero\u002FSKILL.md` (SecretZero only; never secrets in context).","https:\u002F\u002Fgithub.com\u002Fzloeber\u002FSecretZero\u002Fblob\u002Fmain\u002Fsrc\u002Fsecretzero\u002Fdata\u002Fskills\u002Fsecretzero-agent-adopt\u002FSKILL.md",[],[],{"skillNo":83,"name":5,"nameZh":6,"description":7,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":84,"categories":85,"keywords":86,"publishedAt":19},"01M7AGF26S7HJT7571JWGV2E53","https:\u002F\u002Fgithub.com\u002Fzloeber\u002FSecretZero\u002Fblob\u002Fmain\u002Fskills\u002Fsecretzero\u002FSKILL.md",[],[],{"skillNo":88,"name":56,"nameZh":6,"description":57,"descriptionZh":6,"repositoryFullName":8,"ownerLogin":9,"ownerAvatarUrl":10,"ownerAccountNo":11,"ownerDisplayName":12,"repositoryNo":13,"starsCount":14,"licenseSpdxId":15,"licenseFileUrl":6,"sourceHtmlUrl":89,"categories":90,"keywords":91,"publishedAt":19},"01M7AGEXQ9ZM138KCG1995PWF8","https:\u002F\u002Fgithub.com\u002Fzloeber\u002FSecretZero\u002Fblob\u002Fmain\u002Fskills\u002Fsecretzero-handle\u002FSKILL.md",[],[]]