CodeAlive-AI/agentic-secrets

Última atividade de origem registrada: 18 de junho de 2026 às 12:01

Catálogo do SkillsMP atualizado: 9 de novembro de 2026 às 14:22

skills coletadas: 3

Estrelas no GitHub: 3
Forks no GitHub: 0

Instalar com um assistente de IA

Copie este prompt para o assistente de IA que você usa.

Follow https://skillsmp.com/skill-install/prompt.md to install Agent Skills from https://github.com/CodeAlive-AI/agentic-secrets.

README do repositório

Arquivo de origem do README: README.md

Ler o README original

Expandir README completo

# Agentic Secrets Agentic Secrets protects runtime secrets on macOS developer machines. It keeps long-lived provider tokens out of ambient places like `.env` files, shell startup files, MCP configs, and native CLI config files. Secrets are stored locally, released only for an approved runtime request, and tied to a specific tool, target binary identity, delivery context, and local authentication event. Agentic Secrets does not sandbox commands or make target tools trustworthy. It protects the secret delivery boundary: when a secret may be released, to which local tool, through which mechanism, under which policy, and with what audit trail. ## Why Developer tools often expect credentials to be present before they run. That pushes secrets into broad, sticky locations: - shell environments inherited by unrelated processes - `.env` files and shell rc files - MCP server configuration files - native CLI config files - ad hoc scripts and logs Agentic Secrets replaces ambient secret presence with explicit runtime delivery. ## How It Works - Register a local tool and the secret bindings it may receive. - Store secret material in an owner-only encrypted local store. - Validate the target binary identity before each delivery. - Require macOS LocalAuthentication before secret release. - Reuse narrowly scoped delivery grants only when policy allows. - Fail closed on registry, policy, grant, or target identity tampering. - Write structured audit records without secret values. ## Install Requirements: macOS Tahoe 26.x, SwiftPM, and Xcode Command Line Tools or Xcode with the macOS 26 SDK. ```sh git clone https://github.com/CodeAlive-AI/agentic-secrets.git cd agentic-secrets ./scripts/install_local.sh --load --configure-shell ``` Open a new terminal, then verify: ```sh command -v agentic-secrets agentic-secrets release-gates ``` ## Documentation - [Installation](Docs/INSTALLATION.md) - [Operations](Docs/OPERATIONS.md) - [Threat model](Docs/THREAT_MODEL.md) - [Acceptance criteria](Docs/ACCEPTANCE_CRITERIA.md) - [Implementation map](Docs/IMPLEMENTATION_MAP.md) - [Ubiquitous language](Docs/THESAURUS.md) - [Contributing](CONTRIBUTING.md) - [Security policy](SECURITY.md)

Carregando o README do repositório…

Skills neste repositório

Desenvolvedores de software Analistas de segurança da informação

2 categorias ocupacionais · 100% classificado

skill

ocupação

descrição

atualizado

package-macos-app-icons

Desenvolvedores de software

Build, audit, replace, and install native macOS app icons from raster source artwork. Use when Codex needs to review an icon candidate against Apple macOS icon expectations, remove background halos with the standard macOS rounded-rectangle enclosure, preserve…

Idioma do texto original: inglês

2026-06-18

macos-menubar-daemon-engineering

Desenvolvedores de software

Engineer, debug, package, and harden native macOS menu-bar / background-daemon apps built with Swift 6, SwiftUI MenuBarExtra, and SwiftPM (no Xcode project), running as an LSUIElement agent. Focuses on the runtime-only bug classes that a green `swift build`…

Idioma do texto original: inglês

2026-06-17

signed-command-envelope

Analistas de segurança da informação

Design and verify an HMAC-SHA256 signed command envelope — nonce + TTL/expiry + replay cache + receiver-side allowlist — for a downlink control channel such as a cloud→Mac actuation path over MQTT or WebSocket. Use when designing or reviewing a coach→device…

Idioma do texto original: inglês

2026-06-17

Mostrando 3 de 3 skills coletadas.