القائمة
Use for secrets management, credentials handling, and security best practices.
التثبيت باستخدام Codex أو Claude انسخ هذا Prompt والصقه في Codex أو Claude أو مساعد آخر ليراجع صفحة Skill ويثبّتها لك.
استنادا إلى تصنيف SOC المهني
Enhance session checkpoints with git context and diff summaries. Use after completing significant work to enrich checkpoint.md files with repository state, recent commits, and code change summaries. Triggers include "enhance checkpoint", "update checkpoint with git", "add git context to checkpoint", or when finishing a multi-file change session.
Use for model training, hyperparameter tuning, and Modal GPU training.
Use when invoking training, evaluation, and dataset preparation via CLI. Provides all standard commands for this project.
Multi-perspective code analysis using three AI personas (RYAN, FLASH, SOCRATES) for comprehensive decision-making. Use when complex code decisions need analysis from multiple viewpoints, or when avoiding single-perspective blind spots is critical.
Use for authentication management, token validation, and credential troubleshooting.
Guide for creating effective skills. This skill should be used when users want to create a new skill (or update an existing skill) that extends Claude's capabilities with specialized knowledge, workflows, or tool integrations.
| name | security |
| description | Use for secrets management, credentials handling, and security best practices. |
| triggers | ["security","secrets","credentials","api key","token","env var"] |
This skill covers security best practices for handling secrets and credentials.
# Set environment variable (temporary)
export MODAL_TOKEN_ID=your_token_id
# Set in .bashrc/.zshrc for persistence (NOT recommended)
# Instead use .env file (gitignored)
# Load from .env
source .env # Only if .env is gitignored!
# List secrets (shows only names, not values)
gh secret list
# Set a new secret
gh secret set MODAL_TOKEN_ID --body "your_token_value"
# Delete a secret
gh secret delete MODAL_TOKEN_ID
# Set secret for specific environment
gh secret set API_KEY --env production --body "value"
# In workflow file, access via:
env:
MODAL_TOKEN_ID: ${{ secrets.MODAL_TOKEN_ID }}
| Action | Risk | Alternative |
|---|---|---|
| Hardcode tokens | Exposed in repo | Use env vars |
| Commit .env | Secret leak | Add to .gitignore |
| Log secrets | Visible in CI | Use masking: ::add-mask::value |
| Use --body with real token | Shell history | Use file: --body "$(cat token.txt)" |
Ensure these are ignored:
.env
*.pem
*.key
credentials.json
token.txt
secrets/
# .pre-commit-config.yaml
repos:
- repo: https://github.com/pre-commit/pre-commit-hooks
hooks:
- id: check-json
- id: check-yaml
- id: detect-secrets
# Scan for secrets in repo
git-secrets --scan
# Scan commits
git-secrets --scan-commits
# Install pre-commit hook
git-secrets --install
# Configure Modal token (Modal 1.0+ uses 'token new' NOT 'token set')
modal token new
# Verify token
modal token info
modal token list
modal token new for local (Modal 1.0+)::add-mask:: in GitHub Actions