skill CX Codex

using-sops — Claude Code skill: what it does, how to install

Q: How to install using-sops in Claude Code?

Run `npx skills add jssblck/agents --skill using-sops -a claude-code` in your terminal.

Q: Can the agent run sops directly?

Direct execution of `sops` is strictly prohibited by the rules. The agent must interact solely through the `pnpm secrets` CLI wrapper.

Guides agents to handle encrypted environment files with age identities via the pnpm secrets wrapper.

Install into Claude Code · Skills CLI (Vercel) All methods and platforms ↓

npx skills add jssblck/agents --skill using-sops -a claude-code

Open on GitHub

What using-sops does

This skill teaches coding agents how to work with repositories that store encrypted dotenv files under secrets/dev.env and secrets/prod.env. Direct calls to sops are forbidden. The agent works exclusively through the repo wrapper script tools/secrets.ts to prevent credentials from leaking into chat context or output streams.

Local development secrets are managed automatically without bothering the user. When an authorized task needs production credentials, the agent handles elevation independently by pulling the required identity from the 1Password CLI (op read). Without .sops.yaml and the pnpm secrets script present in the project, the workflow fails immediately.

What it helps with

read or edit environment values in secrets/dev.env
run application scripts with decrypted values via pnpm secrets exec
elevate production credentials using the 1Password CLI
keep environment schemas in sync across encrypted environment targets

Example prompts for the agent

Show all decrypted development secrets with pnpm secrets.
Update STRIPE_KEY in dev.env and launch the app via pnpm secrets exec.
Verify production credentials access and elevate via 1Password if required.

How to install using-sops

1Skills CLI (Vercel)

npx skills add jssblck/agents --skill using-sops -a claude-code

2Manually: put the files in place

~/.claude/skills/using-sops/SKILL.md

Copy the whole skill folder; for one project use .claude/skills/using-sops/

1Skills CLI (Vercel)

npx skills add jssblck/agents --skill using-sops -a codex

2Manually: put the files in place

.agents/skills/using-sops/SKILL.md

For all projects use ~/.agents/skills/

1Skills CLI (Vercel)

npx skills add jssblck/agents --skill using-sops -a cursor

2Manually: put the files in place

.cursor/skills/using-sops/SKILL.md

Cursor also reads .agents/skills/ and .claude/skills/

1GitHub CLI

gh skill install jssblck/agents using-sops

2Manually: put the files in place

.github/skills/using-sops/SKILL.md

1Skills CLI (Vercel)

npx skills add jssblck/agents --skill using-sops -a gemini-cli

2Platform CLI

gemini skills install https://github.com/jssblck/agents --path skills/using-sops

Manually: put the files in place

.devin/skills/using-sops/SKILL.md

The legacy .windsurf/skills/ path still works

Skills CLI (Vercel)

npx skills add jssblck/agents --skill using-sops -a opencode

Step by step, with commands for each platform: How to install skills in Claude Code: five ways

Questions about using-sops

How to install using-sops in Claude Code?

Run npx skills add jssblck/agents --skill using-sops -a claude-code in your terminal.

What does using-sops do?

It provides strict procedures for managing age-encrypted environment files without printing private keys into git history or command logs.

Can the agent run sops directly?

Direct execution of sops is strictly prohibited by the rules. The agent must interact solely through the pnpm secrets CLI wrapper.

Similar skills

All skills for Security →

git-guardrails-claude-code Matt Pocock This skill adds a Claude Code hook that stops risky Git commands before they run. Use it when an agent must not push or discard working-tree changes. 499,069installs ponytail-review DietrichGebert ponytail-review reviews a change beyond the diff, checking connected code, bugs, risks, load, tests, speed, and unnecessary code. Use it for PRs and commits. CX Codex +1 57,000installs ponytail-audit DietrichGebert It audits a repository and ranks bugs, risks, and redundant code in a one-shot report. Use it when you need a review without code changes. CX Codex +1 45,400installs security-audit cloudflare Reviews codebases and APIs for vulnerabilities using safe sandboxing. Fits pre-release security reviews, pen-test triage, and architecture checks. CX Codex +1 54,800installs security-and-hardening addyosmani Guides threat modeling and security checks for code that handles user input, authentication, sessions, or external services. Use it when building a feature that accepts untrusted data or reviewing code before release. CX Codex +1 70,200installs supabase official supabase Guides the agent through database configuration and strict RLS policies in Supabase. CX Codex GP ChatGPT 8installs

From the same set10

tag-release Automates cutting Git release tags based on existing project conventions. It calculates the next version, checks CI status, and tracks remote release workflows. CX Codex +1 1,700installs merge-open-prs This skill plans and merges a fixed set of open pull requests through GitHub. Use it when several PRs must land in a controlled order. CX Codex +1 1,700installs ship-it Takes a finished change all the way to a ready pull request: commits, pushes, opens the PR and watches CI until it passes. CX Codex +1 1,700installs code-craft code-craft guides type boundaries, invariants, state, effects, errors, and abstraction choices. Use it when an agent is shaping a code change. CX Codex +1 1,700installs testing-craft Organizes automated checks along a strict hierarchy from static types to end-to-end runs. Useful when reviewing test suites or choosing verification levels for new code. CX Codex +1 1,200installs github-image-upload Adds screenshots or recordings to a GitHub PR, issue, or comment, then checks that each file reached the intended destination. CX Codex +1 1,200installs project-bootstrap This skill configures repository structure, checks, CI, and agent infrastructure. Use it for a new project or a repository prepared for distribution. CX Codex +1 794installs resolve-pr-conflicts Guides coding assistants through resolving pull request merge conflicts inside an isolated Git worktree without touching main branches or breaking local edits. CX Codex +1 666installs