Detect unencrypted secret files in staged Git changes and block commits.
npx skills add https://github.com/piotrb/iamra-injector --skill validate-secrets
Please help me install this Agent Skill. Skill: validate-secrets Source: https://github.com/piotrb/iamra-injector/tree/main/.claude/skills/validate-secrets Command: npx skills add https://github.com/piotrb/iamra-injector --skill validate-secrets
This Skill prevents leakage of sensitive secrets by enforcing SOPS encryption before commits. It scans staged/modified files against common secret patterns and verifies encryption metadata.
Run the validate-secrets skill to scan the current Git staging area and report any unencrypted secret files that require encryption.
High-intent search queries and answers about installing and using this skill.
Prevent unencrypted secret commits by scanning staged files for secret patterns and verifying SOPS encryption metadata before each commit. This Skill identifies files like *.sops.yaml, *secret*.yaml, and */secrets/*.yaml in your staging area and blocks commits containing unencrypted secrets, requiring manual encryption first.
Secret validation detects files matching common naming conventions: *.sops.yaml, *sopssecret*.yaml, */secrets/*.yaml, and *secret*.yaml. The Skill scans these patterns in staged and modified changes to identify secrets requiring encryption before commit.
SOPS verification checks whether staged secret files contain sops: metadata indicating encryption. If unencrypted secrets are detected, the commit is blocked with detailed file listings and explicit instructions to encrypt manually using SOPS, preventing secret leakage.
Yes, this Skill integrates into your Git commit workflow as a pre-commit hook, scanning the staging area for unencrypted secrets and blocking commits that fail verification. It works alongside existing hooks without automatic file modification.
When unencrypted secrets are found, the Skill reports a BLOCKED outcome with detailed file listings and guides you to encrypt files manually before retry. The commit is prevented, protecting sensitive data from accidental exposure.
nq-rdlEncrypt and decrypt YAML, JSON, ENV, and INI secrets with SOPS.
pratosManage encrypted secrets in YAML files using SOPS and Age.
arcasilesgroupStage changes, run ruff and gitleaks checks, update docs, and commit.
Khamel83Automate encrypted secret storage, decryption, and rotation with SOPS and Age.
