zloeber

Use for agent runtime integration: discover Hermes/OpenClaw installs, bootstrap SecretZero environments with `secretzero agent list` / `agent adopt`, lockfile preseed, and restore loops. Inherits absolute rule from `skills/secretzero/SKILL.md` (SecretZero only; never secrets in context).

Use for agentic and operational SecretZero workflows including unified `agent sync`, CLI/API/MCP parity, secure human-in-the-loop vectors, and automation-safe run loops.

Use when authoring, reviewing, or walking a user through a new or existing `Secretfile.yml`. Guided session: manifest root, inventory table, optional local discovery, add/edit loop with secret-type and target menus, validate, optional `secretzero web`. Hermes + MCP notes included. Safe contextless discovery, `.szvar` lanes, policy-bound targets. Inherits absolute rule from `skills/secretzero/SKILL.md`. Co-load `skills/secretzero-handle/SKILL.md` for `.env` / spill-safe CLI.

Use when the task touches `.env`, dotenv/json/yaml secret files, local `file` targets, or any workflow where secret material could enter agent context. Enforces `SZ_AGENT_MODE=true` spill-safe CLI usage, ingest preseed, strict manifest validation, and safe discovery patterns alongside `secretzero-agent` / `secretzero-author`.

Compatibility entrypoint for SecretZero skills. Enforces the absolute rule: never consume secrets in agent context — use SecretZero for all secret handling. Routes to secretzero-author, secretzero-agent, secretzero-handle, and secretzero-agent-adopt.

Use for agentic and operational SecretZero workflows including unified `agent sync`, CLI/API/MCP parity, secure human-in-the-loop vectors, and automation-safe run loops.

Use when authoring, reviewing, or walking a user through a new or existing `Secretfile.yml`. Guided session: manifest root, inventory table, optional local discovery, add/edit loop with secret-type and target menus, validate, optional `secretzero web`. Hermes + MCP notes included. Safe contextless discovery, `.szvar` lanes, policy-bound targets. Inherits absolute rule from `skills/secretzero/SKILL.md`. Co-load `skills/secretzero-handle/SKILL.md` for `.env` / spill-safe CLI.

Compatibility entrypoint for SecretZero skills. Enforces the absolute rule: never consume secrets in agent context — use SecretZero for all secret handling. Routes to secretzero-author, secretzero-agent, secretzero-handle, and secretzero-agent-adopt.

Skill for the Terraform_ingest area of terraform-ingest. 261 symbols across 23 files.

Skill for the Tests area of terraform-ingest. 112 symbols across 15 files.

Builds and validates terraform-ingest config.yaml: repositories, output paths, embeddings, and MCP settings. Use when the user wants to configure terraform-ingest, add repositories, edit config.yaml, or enable vector search.

Runs and monitors terraform-ingest repository ingestion from YAML config, verifies JSON output, and interprets progress status. Use when the user wants to ingest modules, run first ingestion, refresh the module index, or check ingestion progress.

Mandatory before calling work complete when the session changed repo files. Use qa:quick during iteration and qa:prepush before hand-off. Read .terraform-ingest/summary.json only — not log files.

Installs terraform-ingest and prepares a fresh environment: dependencies, config initialization, and git credential checks. Use when the user wants to install terraform-ingest, get started, set up for the first time, or prepare before configuration and ingestion.

Routes AI agents through terraform-ingest workflows: install, configure, ingest, and module discovery. Use when the user mentions terraform-ingest, setting up a Terraform module library, ingesting modules, or getting started with this project.

Publish static sites to S3 and container images to ECR, then register deployment metadata in the shared HTTP API using AWS CLI with IAM Identity Center (Entra) credentials.