validate-secrets

What problem does it solve?

This Skill prevents leakage of sensitive secrets by enforcing SOPS encryption before commits. It scans staged/modified files against common secret patterns and verifies encryption metadata.

Core Features & Use Cases

• Pattern-based detection: identifies secret files by naming conventions such as *.sops.yaml, sopssecret.yaml, /secrets/.yaml, and secret.yaml.
• Encryption verification: detects whether a file contains sops: metadata indicating encryption.
• Commit governance: reports unencrypted secrets and guides the user to encrypt manually, avoiding automatic changes.
• Workflow integration: hooks into the commit workflow to block unencrypted changes.

Quick Start

Run the validate-secrets skill to scan the current Git staging area and report any unencrypted secret files that require encryption.