bash.d/.claude/skills/new-credential/SKILL.md

name	description	user-invocable	disable-model-invocation	arguments
new-credential	Create a new bash.d credential file with .example template, .gitignore entry, and correct permissions	true	true	name description required name Short name for the credential (e.g. 'openai', 'stripe') true name description required var Environment variable name to export (e.g. 'OPENAI_API_KEY') true

Create a new credential file pair in ~/.bash.d/ following the project conventions.

Steps

1. Create the .example template at 99-$name.example (mode 644):

   # shellcheck shell=bash
   # <Description of what this credential is for>
   # Copy to 99-$name and fill in your token, then: chmod 700 99-$name
   require_private "${BASH_SOURCE[0]}"
   export $var=your-token-here
   

2. Create the real credential file at 99-$name (mode 700):

   # shellcheck shell=bash
   # NOTE: Contains credentials - ensure file permissions remain 600/700
   require_private "${BASH_SOURCE[0]}"
   export $var=your-token-here
   

3. Add 99-$name to .gitignore (append to the existing credential list)

4. Set permissions: chmod 700 99-$name

5. Validate both files: shellcheck 99-$name.example 99-$name

6. Remind the user to edit 99-$name and fill in the real secret value

Rules

• The .example template must NOT contain real secrets — use your-token-here as placeholder
• The real credential file must have mode 700
• Both files must start with # shellcheck shell=bash
• Both files must call require_private "${BASH_SOURCE[0]}" as the first functional line
• Only the .example file should be staged in git — verify 99-$name is gitignored