skills.rest
AlastairThomson
AlastairThomsonCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

Auth Interview

Bootstrap a secure auth.yaml through an interactive credential configuration interview.

Updated Aug 27, 2026
Search Tags:#security#interactive#yaml#credentials#vault#auth
One-click install
npx skills add https://github.com/AlastairThomson/AgentSkills --skill auth-interview
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Auth Interview
Source: https://github.com/AlastairThomson/AgentSkills/tree/main/skills/global-scope/auth-interview
Command: npx skills add https://github.com/AlastairThomson/AgentSkills --skill auth-interview

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill bootstraps ~/.agent-skills/auth/auth.yaml. It guides the user through which external sources (AWS, Azure, SharePoint/M365, SMB) they use, which LLM providers they use (Anthropic, OpenAI, Gemini, Groq, HuggingFace, Mistral, Cohere, local Ollama/llama.cpp/vLLM), and where each credential is stored (1Password, Bitwarden, Keeper, Vault, macOS Keychain, Windows Credential Manager, Linux libsecret, OAuth interactive, env vars, or a custom script). Writes the config with permissions 0600. Use when the user says 'set up auth', 'configure credentials', 'first-time setup', or when auth-config reports no config file exists.

Core Features & Use Cases

  • Interactive interview to generate the config at ~/.agent-skills/auth/auth.yaml with strict permissions.
  • Detects available vault CLIs (op, bw, keeper, vault, security, cmdkey, secret-tool, kwallet-query, az, m365, gcloud, gh) to tailor provider options.
  • Reads references/providers.md for provider schemas and supports both OAuth interactive flows and env-var based credentials.
  • Guides Section 1 — External sources (AWS, Azure, SharePoint/M365, SMB) with per-source credential-storage prompts and follow-ups.
  • Guides Section 2 — Model providers (hosted and local) with per-provider configuration, env-var export, and per-provider URL defaults.
  • Guides Section 3 — Preview + write: renders the YAML, prompts for writing, and performs a dry validation of each entry.
  • Guides Section 4 — Update mode: add, modify, or start over existing configurations with backups.
  • Edge-case handling and UX safeguards: vault CLI absence, multiple 1Password accounts, OS-mismatch warnings, per-repo overrides notes, headless/CI handling.
  • Security-first: no vault writes, no password copying, and strict file permissions (0600).

Quick Start

Run the auth interview to bootstrap ~/.agent-skills/auth/auth.yaml and begin configuring credentials securely.

Frequently Asked Questions about Auth Interview

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up credentials for multiple model providers in a single auth config file?▼

To set up credentials securely, this interactive interview bootstraps a centralized auth.yaml file, guiding you through configuring hosted and local model providers like Anthropic, OpenAI, and Ollama while storing secrets safely in external vaults.

Can I configure auth credentials for AWS, Azure, and SharePoint in one guided setup?▼

Yes, the interactive auth setup guides you through configuring external sources like AWS, Azure, and SharePoint/M365, prompting you for specific credential storage methods such as 1Password, Bitwarden, or OS-native keychains for each source.

What is the best way to manage agent credentials without storing passwords in plain text?▼

Managing agent credentials securely involves storing secrets in vaults like Keeper, macOS Keychain, or Windows Credential Manager rather than plain text, and this setup enforces strict 0600 file permissions on the resulting auth.yaml configuration file.

Does the auth configuration interview support headless environments or CI pipelines?▼

The auth setup includes specific edge-case handling for headless and CI environments, ensuring secure credential configuration can proceed without interactive prompts by leveraging environment variables and pre-configured vault CLIs.

How do I update an existing auth.yaml file when adding a new LLM provider?▼

Updating an existing auth.yaml file uses a dedicated update mode that allows you to add or modify provider configurations incrementally, automatically creating backups of previous credentials while validating new entries before writing them to disk.

How does credential setup detect which vault tools are available on my system?▼

Credential setup detects available vault CLIs like op, bw, and vault by scanning your environment, tailoring the interactive configuration options to only display compatible credential storage providers for your specific operating system.

Related Skills

Explore More Software Engineering Skills→
martinholovskymartinholovsky
45

os-keychain

Store, retrieve, and delete secrets via OS-native keychain services.

Community
Advanced
danfrdndanfrdn

rclone

Transfer files across cloud storage services using the rclone command-line tool.

Community
Intermediate
SuperlendSuperlend

libafl

Build custom fuzzers with modular Rust components and pluggable strategies.

Official
Advanced
abhiunixabhiunix
1

1password

Manage 1Password CLI sign-in, vault reads, and secret injection workflows.

Community
Intermediate