_generate-secret

Generate cryptographically secure random strings in hex, base64url, or alphanumeric formats.

34|6|Updated Jun 30, 2026
One-click install
npx skills add https://github.com/flavien-ia/hypervibe-harness --skill generate-secret
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: _generate-secret
Source: https://github.com/flavien-ia/hypervibe-harness/tree/main/skills/_generate-secret
Command: npx skills add https://github.com/flavien-ia/hypervibe-harness --skill generate-secret

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This skill eliminates the risk of using weak or predictable credentials by providing a standardized, cryptographically secure way to generate secrets for environment variables and authentication tokens.

Core Features & Use Cases

  • Cryptographic Security: Uses Node.js crypto primitives to ensure high-entropy output for sensitive keys.
  • Format Flexibility: Supports hex, base64url, and alphanumeric formats to match specific infrastructure requirements like NextAuth or webhook signatures.
  • Use Case: When bootstrapping a new project, use this to automatically generate a secure AUTH_SECRET for your authentication provider or a CRON_SECRET for your background tasks.

Quick Start

Ask the assistant to generate a new base64url encoded secret for your authentication environment variable.

Frequently Asked Questions about _generate-secret

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate secure random secrets for environment variables?

To generate secure random secrets for environment variables, you can use a cryptographic utility that produces high-entropy strings formatted as hex, base64url, or alphanumeric characters to ensure compatibility with your infrastructure requirements.

What is the best way to create a JWT secret or API key for app scaffolding?

Creating a JWT secret or API key for app scaffolding is best handled by a cryptographic random string generator, which eliminates the risk of using weak credentials by leveraging Node.js crypto primitives for high-entropy output.

Can I generate base64url tokens compatible with NextAuth and webhook signatures?

Yes, you can generate base64url tokens compatible with NextAuth and webhook signatures by specifying the base64url output format, ensuring the generated authentication secret meets specific provider formatting constraints.

Does generating cryptographic secrets require external dependencies?

Generating cryptographic secrets does not require external dependencies because the process utilizes built-in Node.js crypto primitives to deliver secure, randomized strings directly during automated project configuration.

Why use alphanumeric format for generating authentication tokens?

Use alphanumeric format for generating authentication tokens when your environment variables or system configuration restricts special characters, ensuring the cryptographic secret remains compatible without causing parsing errors.

When should I avoid using weak credentials for automated project scaffolding?

You should avoid using weak credentials for automated project scaffolding whenever setting up sensitive environment variables like AUTH_SECRET, as predictable strings compromise application security and bypass cryptographic protections.