Agent skill · security · thebushidocollective
fnox-security-best-practices
Use when implementing secure secrets management with Fnox. Covers encryption, key management, access control, and security hardening.
Why this skill is useful
Provides specific commands and patterns for secure secrets management with Fnox that the AI wouldn't reliably generate on its own.
What it needs
About 5k tokens when loaded. Last updated 2026-07-19. 187 stars on the source repository.
What this skill does
Fnox - Security Best Practices Security guidelines and best practices for managing secrets with Fnox. Encryption Fundamentals Always Encrypt Sensitive Data Use Strong Encryption Key Management Protect Private Keys Separate Public and Private Keys Rotate Keys Regularly Access Control Use Least Privilege Team Access Control Role-Based Secrets Git Security Never Commit Sensitive Data Audit Git History Use Pre-Commit Hooks Environment Separation Separate Development and Production Use Profiles for Environments Cloud Provider Security AWS Best Practices Azure Best Practices GCP Best Practices Audit and Monitoring Log Secret Access Monitor for Anomalies Regular Security Audits Secrets Lifecycle Rotate Secrets Regularly Remove Obsolete Secrets Document Secret Purpose CI/CD Security Use Dedicated CI Keys Restrict CI Secret Access Minimal CI Permissions Best Practices Summary DO ✅ Always encrypt sensitive secrets ✅ Use strong encryption (age, KMS) ✅ Store private keys securely ✅ Separate dev and prod secrets ✅ Use .gitignore for local overrides ✅ Rotate keys and secrets regularly ✅ Use cloud provider managed identities ✅ Audit secret access ✅ Document secret purpose ✅ Use profiles for environments DON'T ❌ Never commit private keys ❌ Never use plain text for sensitive data ❌ Don't share private keys between team members ❌ Don't hardcode credentials ❌ Don't mix dev and prod secrets ❌ Don't skip encryption in production ❌ Don't ignore security warnings ❌ Don't use weak passwords as secrets Common Threats and Mitigations Threat: Accidental Commit Threat: Key Compromise Threat: Unauthorized Access Related Skills configuration: Managing fnox.toml securely providers: Choosing secure providers
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills thebushidocollective/security-best-practices