メニュー
Secure credential intake via local web form. Spin up a one-page server on Tailscale, paste keys, upload PEM/JSON files, hit submit — secrets land in .hex/secrets/ with 600 perms and auto-sync to launchctl + cc-connect.
デフォルトでは、最初にソースを確認する Prompt が選択されています。直接コマンドに切り替えるか、ローカルコピーをダウンロードすることもできます。
インストールを決める前に、SKILL.md と SkillsMP に表示されている付属ファイルをお読みください。
Codex または Claude でインストール この Prompt をコピーして Codex、Claude、または他のアシスタントに貼り付けると、Skill ページを確認してインストールできます。
直接コマンドでは確認用 Prompt が省略されます。実行前にソースを確認してください。
npx skills add https://github.com/aibot88/sec_skill_store --skill secret-intakeコマンドは1行のまま表示されます。コピー前に横へスクロールして全体を確認してください。
ローカルで確認しますか？SkillsMP が現在取得できるファイルをダウンロードできます。
Guides the creation of agile user stories and Gherkin feature files. Use when the user wants to create a user story, write acceptance criteria, define Gherkin scenarios, or author BDD feature files. This should trigger for requests such as Create a user story; Write a user story; I need to write a user story. Part of cursor-rules-java project
Guía técnica completa para integrar 250+ servicios externos con agentes IA usando Composio. Cubre instalación, autenticación OAuth, gestión de herramientas, triggers y flujos multi-servicio.
Facilitates conversational discovery to create Architectural Decision Records (ADRs) for non-functional requirements using the ISO/IEC 25010:2023 quality model. Use when the user wants to document quality attributes, NFR decisions, security/performance/scalability architecture, or design systems with measurable quality criteria. This should trigger for requests such as Create ADR for Non-functional requirements; Document Non-functional requirements; Capture Non-functional requirements; Generate Non-functional requirements in an ADR. Part of cursor-rules-java project
SOC 職業分類に基づく
SKILL.md を表示中
| name | secret-intake |
| description | Secure credential intake via local web form. Spin up a one-page server on Tailscale, paste keys, upload PEM/JSON files, hit submit — secrets land in .hex/secrets/ with 600 perms and auto-sync to launchctl + cc-connect. |
| version | 1.0.0 |
Reusable local web form for ingesting API keys, tokens, and key files into hex.
.hex/secrets/bash $AGENT_DIR/.hex/skills/secret-intake/scripts/start.sh
Then give the user the Tailscale URL: https://<your-tailscale-hostname>/secrets
The server runs on :9877 locally. hex-router fronts it at /secrets with TLS via Tailscale Serve.
bash $AGENT_DIR/.hex/skills/secret-intake/scripts/stop.sh
.hex/secrets/{institution}.env.hex/secrets/{institution}-{filename}chmod 600.env file already exists for that institution, new keys are merged (existing keys preserved, matching keys updated)sync-secrets.sh runs automatically — propagates to launchctl setenv + cc-connect plist + daemon restart0.0.0.0 but only reachable via Tailscale (no public exposure)log_message is a no-opCache-Control: no-store on every response*.env in .gitignore).hex/skills/secret-intake/
├── SKILL.md ← this file
└── scripts/
├── server.py ← the intake server
├── start.sh ← launch server in background
└── stop.sh ← kill server
| Type | Path | Example |
|---|---|---|
| Env vars | .hex/secrets/{institution}.env | .hex/secrets/alpaca.env |
| Key files | .hex/secrets/{institution}-{filename} | .hex/secrets/coinbase-api-key.pem |
The intake server is plain HTTP on :9877. hex-router (:8880) proxies /secrets → :9877 with prefix stripping. Tailscale Serve fronts hex-router on :443 with TLS.
Browser → https://<your-tailscale-hostname>/secrets
→ Tailscale Serve (TLS termination)
→ hex-router :8880 /secrets → strip prefix → :9877 /
→ secret-intake server (plain HTTP)
| Env var | Default | What it does |
|---|---|---|
PORT | 9877 | Server listen port |
HEX_DIR | $AGENT_DIR | Hex root directory |