# using-sops

Guides agents to handle encrypted environment files with age identities via the pnpm secrets wrapper.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 1700 installs
- Author: jssblck
- License: GPL-3.0 · policy=link-only · description only; the file stays with the author
- Source: https://github.com/jssblck/agents/tree/HEAD/skills/using-sops/SKILL.md
- Updated: 2026-10-09
- HTML: https://affpapa.org/en/nevibecode/skills/using-sops

## What it does

This skill teaches coding agents how to work with repositories that store encrypted dotenv files under `secrets/dev.env` and `secrets/prod.env`. Direct calls to `sops` are forbidden. The agent works exclusively through the repo wrapper script `tools/secrets.ts` to prevent credentials from leaking into chat context or output streams.

Local development secrets are managed automatically without bothering the user. When an authorized task needs production credentials, the agent handles elevation independently by pulling the required identity from the 1Password CLI (`op read`). Without `.sops.yaml` and the `pnpm secrets` script present in the project, the workflow fails immediately.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add jssblck/agents --skill using-sops -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/using-sops/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/using-sops/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add jssblck/agents --skill using-sops -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/using-sops/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add jssblck/agents --skill using-sops -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/using-sops/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install jssblck/agents using-sops
```

2. **Manually: put the files in place**
- File: `.github/skills/using-sops/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add jssblck/agents --skill using-sops -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/jssblck/agents --path skills/using-sops
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/using-sops/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add jssblck/agents --skill using-sops -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/jssblck/agents/tree/HEAD/skills/using-sops/SKILL.md

## When to use it
- read or edit environment values in `secrets/dev.env`
- run application scripts with decrypted values via `pnpm secrets exec`
- elevate production credentials using the 1Password CLI
- keep environment schemas in sync across encrypted environment targets

## Example prompts
- Show all decrypted development secrets with pnpm secrets.
- Update STRIPE_KEY in dev.env and launch the app via pnpm secrets exec.
- Verify production credentials access and elevate via 1Password if required.

## Similar
- [git-guardrails-claude-code](https://affpapa.org/en/nevibecode/skills/git-guardrails-claude-code.md) — skill · 499069 installs
- [ponytail-review](https://affpapa.org/en/nevibecode/skills/ponytail-review.md) — skill · 57000 installs
- [ponytail-audit](https://affpapa.org/en/nevibecode/skills/ponytail-audit.md) — skill · 45400 installs
- [security-audit](https://affpapa.org/en/nevibecode/skills/cloudflare-security-audit.md) — skill · 54800 installs
- [security-and-hardening](https://affpapa.org/en/nevibecode/skills/security-and-hardening.md) — skill · 70200 installs
- [supabase](https://affpapa.org/en/nevibecode/skills/supabase.md) — skill · 8 installs

From the same set: [jssblck/agents](https://affpapa.org/en/nevibecode/by/jssblck/agents.md) — 10 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md