菜单
Work with macOS Keychain generic password items through bundled scripts. Use when Codex needs to check, read metadata, create, update, retrieve, reveal, or delete local credentials by `service + account` on macOS, especially as a thin credential-store wrapper inside another workflow.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
基于 SOC 职业分类
Create and maintain repository-aware technical plans, implementation plans, refactor proposals, design drafts, and migration plans. Use when Codex is asked to investigate a codebase and propose a solution before implementation; write or update a durable plan file; produce a 方案、实施计划或重构计划; split engineering work into phases or pull requests; document scope, non-goals, API and behavior decisions, breaking changes, migrations, risks, testing, or validation; or transition a plan through draft, planned, in-progress, blocked, and completed states.
Create GitHub pull requests from a local branch using a reviewable workflow for branch checks, diff analysis, PR title/body writing, and gh CLI creation. Use when opening a PR, drafting or improving a PR description, preparing a branch for review, or adding reviewers on GitHub.
Create GitLab merge requests from a local branch using a reviewable workflow for branch checks, GitLab host detection, diff analysis, title and description writing, and `glab mr create`. Use when opening a GitLab merge request, drafting or improving merge request copy, preparing a branch for review, or working across GitLab.com and self-managed GitLab instances.
Inspect, triage, approve, and merge GitHub Renovate pull requests with gh. When no repository is provided, use the default preset repository set, build a candidate execution plan, and execute only after explicit user confirmation. Use when the user asks to check, batch-handle, approve, or merge Renovate PRs.
Scaffold a project-local memory directory and AGENTS.md guidance for reusable agent knowledge. Use when a user wants to initialize `.agents/memories/` or another project memory path so future agents can read and maintain durable project context.
High-bar review for changes in open-telemetry/opentelemetry-go with strict standards for correctness, compatibility, and performance.
| name | mac-keychain |
| description | Work with macOS Keychain generic password items through bundled scripts. Use when Codex needs to check, read metadata, create, update, retrieve, reveal, or delete local credentials by `service + account` on macOS, especially as a thin credential-store wrapper inside another workflow. |
| metadata | {"name":"Mac Keychain","description":"Work with macOS Keychain generic password items for local credential checks, updates, retrieval, reveal, and deletion.","author":"Flc゛","created":"2026-03-27T07:51:16.000Z"} |
Use this skill to operate on macOS Keychain generic password items.
exists, read-meta, set, update, read-secret, reveal-secret, and delete.macOS, /usr/bin/security, and /bin/zsh.service + account before any write, delete, or secret read.login keychain.--keychain only when the target is not the default login keychain.service or account for set, update, read-secret, reveal-secret, or delete.set or update.read-secret for downstream machine use after the caller has already decided that retrieval is allowed.reveal-secret only when the user explicitly wants plaintext in visible output. Require --confirmed.delete only with a clear target. Require --confirmed.All scripts accept --service and --account. Use --keychain only for a non-default keychain.
scripts/keychain-exists.sh: return whether an item exists.scripts/keychain-read-meta.sh: return safe metadata only.scripts/keychain-set.sh: create a new item and fail if it already exists.scripts/keychain-update.sh: update an existing item and fail if it does not exist.scripts/keychain-read-secret.sh: return a plaintext secret for downstream use. Use --value-only to emit only the secret.scripts/keychain-reveal-secret.sh: return a plaintext secret for visible output. Require --confirmed.scripts/keychain-delete.sh: delete an item. Require --confirmed.scripts/keychain-read-secret.sh --value-only.read-secret output as sensitive even when the caller does not print it.reveal-secret.