Which encryption methods does this skill prioritize?

The skill focuses on modern 'age' encryption for local/team files and managed Cloud KMS (AWS, Azure, GCP) for high-security enterprise environments.

Does it integrate with major cloud providers?

Absolutely. It covers security best practices for AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager using managed identities.

Is secret rotation covered in these practices?

Yes, it provides CLI commands and workflows for generating new identities, re-encrypting secrets, and updating service credentials without downtime.

How does this skill help prevent credential leaks?

It provides pre-commit hooks and git-audit patterns to ensure sensitive files like fnox.local.toml and private keys are never committed to version control.

Can I use this for different deployment environments?

Yes, it includes specific patterns for environment separation using profiles to distinguish between development, staging, and production secrets.

Fnox Security Best Practices

Name: Fnox Security Best Practices
Author: TheBushidoCollective

byTheBushidoCollective

•

安全与测试

Implements secure secrets management workflows for Fnox using advanced encryption, key management, and access control patterns.

关于

This skill provides comprehensive security guidelines and implementation patterns for managing sensitive data within the Fnox ecosystem. It enables Claude to enforce best practices such as robust encryption using 'age' or cloud KMS providers, secure key rotation, and strict environment separation. By integrating these patterns, developers can prevent accidental credential leaks, audit secret access, and maintain least-privilege access controls across local development, CI/CD, and production environments.

主要功能

Multi-environment profile separation for secure deployment pipelines
Encrypted secrets management using 'age' and Cloud KMS providers
72 GitHub stars
Cloud provider IAM integration for AWS, Azure, and Google Cloud
Automated Git security via pre-commit hooks and repository auditing
Comprehensive auditing workflows for secret lifecycle management

使用场景

Migrating plain-text environment variables to encrypted, cloud-backed secret providers
Hardening a repository against accidental credential leaks via git-history auditing and hooks
Setting up a secure team-based secrets workflow using decentralized public/private key pairs

关于

主要功能

Multi-environment profile separation for secure deployment pipelines
Encrypted secrets management using 'age' and Cloud KMS providers
72 GitHub stars
Cloud provider IAM integration for AWS, Azure, and Google Cloud
Automated Git security via pre-commit hooks and repository auditing
Comprehensive auditing workflows for secret lifecycle management

使用场景

Migrating plain-text environment variables to encrypted, cloud-backed secret providers
Hardening a repository against accidental credential leaks via git-history auditing and hooks
Setting up a secure team-based secrets workflow using decentralized public/private key pairs