메뉴
Use when updating GitHub authentication token scopes and re-registering the token into kinko shared secrets. Handles gh auth refresh, avoiding GITHUB_TOKEN env precedence, writing shared GITHUB_TOKEN, and hash-based verification.
Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.
SOC 직업 분류 기준
Execute kinko release operations end-to-end for Go binaries, including local verification, artifact packaging, and optional GitHub release publishing. Use when users ask to release, publish a version, or build release binaries.
Use when users want to manage encrypted environment variables with the kinko CLI, including init/unlock, shared vs repo scope, set/get/show/delete/move, stale path-scope pruning, export/import, and exec-based runtime injection.
Use when creating or organizing design documents. Provides directory structure, file naming, and content guidelines for design specs and references.
Use when writing, reviewing, or refactoring Go code. Provides error handling patterns, project layout, concurrency, and interface design guidelines.
Use when creating implementation plans from design documents. Provides plan structure, status tracking, and progress logging guidelines.
Use this skill when creating or modifying GitHub Actions workflow files (.github/workflows/*.yml). Ensures all actions are pinned by commit SHA, permissions are minimized, script injection is prevented, and other supply chain security best practices are applied.
| name | refresh-github-token-to-kinko |
| description | Use when updating GitHub authentication token scopes and re-registering the token into kinko shared secrets. Handles gh auth refresh, avoiding GITHUB_TOKEN env precedence, writing shared GITHUB_TOKEN, and hash-based verification. |
| allowed-tools | Read, Bash, Grep, Glob |
Refresh GitHub CLI auth scope and sync the usable token into kinko shared secret GITHUB_TOKEN.
gh auth status -h github.com
env -u GITHUB_TOKEN gh auth refresh -h github.com -s workflow
gh auth (not environment override) and write to kinko shared.kinko status
kinko set-key GITHUB_TOKEN --shared --value "$(env -u GITHUB_TOKEN gh auth token)"
kinko_sha="$(kinko --force --profile shared get GITHUB_TOKEN --reveal | tr -d '\n' | sha256sum | awk '{print $1}')"
gh_sha="$(env -u GITHUB_TOKEN gh auth token | tr -d '\n' | sha256sum | awk '{print $1}')"
[ "$kinko_sha" = "$gh_sha" ] && echo "sync_ok"
GITHUB_TOKEN environment variable has higher precedence than keyring auth in gh.env -u GITHUB_TOKEN when the goal is to use refreshed keyring credentials.kinko get/show --reveal is sensitive output; use only when necessary and avoid printing values.