git-workflow-secrets

Diagnose external service key states across storage, environment, and integration screens.

1|Updated Jan 14, 2024
One-click install
npx skills add https://github.com/Eyhenij/rt-tools --skill git-workflow-secrets-eyhenij
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: git-workflow-secrets
Source: https://github.com/Eyhenij/rt-tools/tree/main/.claude/skills/git-workflow-secrets
Command: npx skills add https://github.com/Eyhenij/rt-tools --skill git-workflow-secrets-eyhenij

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? When a feature that talks to an external service silently stops working — mails do not leave, translations do not update — this Skill guides the diagnosis of where the service key actually lives, what state it is in, and why a green probe does not guarantee a working feature. ## Core Features & Use Cases - Key Location Analysis: Distinguishes owner-created keys stored encrypted in the storage from application-wide keys living in the environment, and separates both from rollout secrets read only by the pipeline. - Integration State Interpretation: Decodes the five states of an integration row (unknown, storage unavailable, not set, nothing to decrypt with, unchecked/working/not working) to pinpoint the real cause of a silent feature. - Probe Limitation Awareness: Explains why a green probe does not prove the feature works, and why the feature itself must be verified after entering a key. - Use Case: Ten days of silent outgoing mail are traced not through server logs but through the integrations screen, which shows "not set" — the key was never created. ## Quick Start Ask the agent to analyze why an external integration such as mail delivery or translation updates is silent, and have it check the integration row state before inspecting logs.

Frequently Asked Questions about git-workflow-secrets

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I diagnose why an external service integration stopped working?

Check the integrations screen first, not the logs. The integration row state answers most cases: "not set" means the key was never created, while "nothing to decrypt with" means the encryption key changed and recreating the service key is useless.

What is the difference between a rollout secret and an external service key?

Rollout secrets like registry passwords and node access keys are read by the pipeline and stored in repository settings, never by the application. External service keys live in the storage or environment and are read by the application at runtime.

Why does a green integration probe not mean the feature works?

The probe only queries what the service gives out by the key, such as model or domain lists, which can succeed with an empty balance. It sends no mail and makes no paid request, so the feature itself must be verified after entering a key.

Can a missing service key be fixed by setting an environment variable?

No. Owner-created keys are read only from the encrypted storage row; an environment variable of the same name is ignored by the application. Only the secrets encryption key itself comes from the environment.

Can a database migration move a key from environment into storage?

No. The secret is encrypted by the application, so a migration creates the table but cannot move values. The owner must create the key on the integrations screen the same day the change rolls out.