Which encryption methods does this skill prioritize?

The skill focuses on modern 'age' encryption for local/team files and managed Cloud KMS (AWS, Azure, GCP) for high-security enterprise environments.

Does it integrate with major cloud providers?

Absolutely. It covers security best practices for AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager using managed identities.

Is secret rotation covered in these practices?

Yes, it provides CLI commands and workflows for generating new identities, re-encrypting secrets, and updating service credentials without downtime.

How does this skill help prevent credential leaks?

It provides pre-commit hooks and git-audit patterns to ensure sensitive files like fnox.local.toml and private keys are never committed to version control.

Can I use this for different deployment environments?

Yes, it includes specific patterns for environment separation using profiles to distinguish between development, staging, and production secrets.

Fnox Security Best Practices

Name: Fnox Security Best Practices
Author: TheBushidoCollective

byTheBushidoCollective

•

Security & Testing

Implements secure secrets management workflows for Fnox using advanced encryption, key management, and access control patterns.

This skill provides comprehensive security guidelines and implementation patterns for managing sensitive data within the Fnox ecosystem. It enables Claude to enforce best practices such as robust encryption using 'age' or cloud KMS providers, secure key rotation, and strict environment separation. By integrating these patterns, developers can prevent accidental credential leaks, audit secret access, and maintain least-privilege access controls across local development, CI/CD, and production environments.

Key Features

01Multi-environment profile separation for secure deployment pipelines

02Encrypted secrets management using 'age' and Cloud KMS providers

0372 GitHub stars

04Cloud provider IAM integration for AWS, Azure, and Google Cloud

05Automated Git security via pre-commit hooks and repository auditing

06Comprehensive auditing workflows for secret lifecycle management

Use Cases

01Migrating plain-text environment variables to encrypted, cloud-backed secret providers

02Hardening a repository against accidental credential leaks via git-history auditing and hooks

03Setting up a secure team-based secrets workflow using decentralized public/private key pairs

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add thebushidocollective/han security-best-practices

For use in Claude.ai and ChatGPT

Download Skill