pypi-doppler

Publish PyPI packages locally using Doppler-managed credentials.

62|10|Updated Dec 4, 2025
One-click install
npx skills add https://github.com/terrylica/cc-skills --skill pypi-doppler
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pypi-doppler
Source: https://github.com/terrylica/cc-skills/tree/main/plugins/itp/skills/pypi-doppler
Command: npx skills add https://github.com/terrylica/cc-skills --skill pypi-doppler

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires doppler, uv, and includes scripts (resource) components.

What problem does it solve?

Publishing Python packages to PyPI from CI/CD pipelines often involves security risks (long-lived tokens), slow feedback loops, and lack of manual control. This skill enforces a secure, local-only publishing workflow with robust credential management.

Core Features & Use Cases

  • Local-Only PyPI Publishing: Provides a script for publishing Python packages directly from your local machine, bypassing slow CI/CD pipelines.
  • Doppler Credential Management: Securely retrieves PyPI API tokens from Doppler, eliminating plaintext storage and enabling easy rotation.
  • CI Detection Guards: Prevents accidental execution in CI/CD environments, enforcing the local-only policy.
  • Pre-Publish Validation: Automatically verifies version increments and repository state before publishing, preventing errors.
  • Use Case: After a new version of your Python package has been tagged by semantic-release, use this skill to quickly and securely publish it to PyPI from your local machine, ensuring a fast and controlled release process.

Quick Start

Publish the current Python package to PyPI using Doppler credentials. Ensure the version has been incremented by semantic-release.

Frequently Asked Questions about pypi-doppler

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I publish Python packages to PyPI securely without CI/CD?

Publish Python packages locally using Doppler to manage PyPI tokens securely. This skill provides a script that retrieves credentials from Doppler, validates version increments, and publishes directly from your machine, bypassing slow CI/CD pipelines while maintaining manual control.

Can I use Doppler to store and retrieve PyPI API tokens?

Yes. Doppler manages PyPI API tokens securely without plaintext storage, enabling easy rotation and retrieval during local publishing workflows. The skill integrates Doppler credential management into the publish script automatically.

How do I prevent accidental PyPI publishing from CI/CD environments?

This skill enforces CI detection guards in the publish script to block execution in CI/CD pipelines, ensuring packages are released only from local machines with manual approval, protecting against unintended or premature releases.

What validation happens before publishing a Python package to PyPI?

Pre-publish validation automatically verifies version increments and repository state before publishing. This prevents common errors and ensures the package version has been properly incremented, typically by semantic-release, before uploading to PyPI.

Does this work with packages using semantic-release for versioning?

Yes. This skill is designed for workflows where semantic-release tags new versions. After semantic-release increments the version, use this skill to quickly publish the tagged release locally with Doppler-managed credentials.