mxa-secrets
Keeps environment variables and secrets consistent across a developer's machine, CI and the host, and makes sure a key never ends up in code the browser can see.
- Puts configuration in one consistent place for local, CI and the host.
- Says where a key belongs before someone puts it somewhere it cannot be taken back from.
- Keeps keys out of the browser and out of the repository, and explains what to do when one has been committed.
What is inside
Instructions. Nothing here runs on its own: the judgement is the skill.
- Evals
- 3
Works with
The outside tools and connectors this skill drives.
- GitHub secrets· our default
- Vercel environment variables
- a .env file convention
The first is what we reach for on our own projects. A project that already uses one of the others keeps it, and the skill works with that instead.