Decrypt and view .age secret files using a specified path.
npx skills add https://github.com/iamruinous/nix-config --skill view-secret
Please help me install this Agent Skill. Skill: view-secret Source: https://github.com/iamruinous/nix-config/tree/main/.opencode/skills/view-secret Command: npx skills add https://github.com/iamruinous/nix-config --skill view-secret
Decrypt and securely view the contents of encrypted .age secret files when needed, without exposing plaintext data more than necessary.
.age encrypted files to reveal their content for a quick review.Run the view-secret operation to reveal the contents of a chosen .age secret file.
High-intent search queries and answers about installing and using this skill.
You can securely view age-encrypted files by running a decrypt operation with agenix and agenix-helper. This reveals plaintext contents for quick review without exposing sensitive data longer than necessary.
Auditing environment values in .age files is best handled through on-demand decryption. This securely reveals secret contents during host configuration reviews without permanently decrypting them on disk.
Yes, you need agenix and agenix-helper to decrypt .age secret files. These dependencies provide the controlled authorization framework required to securely view encrypted contents.
Yes, on-demand secret access works across hosts and environments. By specifying a secret_path parameter, you can securely view encrypted files wherever controlled authorization is required.
Controlled authorization for age-encrypted secrets works by using agenix and agenix-helper to manage decryption. This ensures that viewing secret files remains an auditable action rather than granting unrestricted access.
Decrypting secrets on demand minimizes exposure by revealing plaintext only when needed. This prevents sensitive data from sitting unencrypted on the host, reducing the risk of unauthorized access during audits.
iamruinousRekey secrets across hosts defined in secrets.nix after .age file changes.
ankraioEncrypt Kubernetes Secrets in GitOps repos using SOPS with AGE.
olafkfreundConfigure reproducible NixOS dev shells with Nix Flakes and direnv.
BagelHoleEncrypt and decrypt files with Mozilla SOPS using cloud KMS or PGP.