skills-keys SKILL.md skillB
skills-keys from mikefluff/skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add mikefluff/skills/skills-keys@git:20260803.e8ff76fPins git:20260803.e8ff76f in mdr.lock. Pin the fingerprint instead.
- Audit grade
- B, 16 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- mikefluff/skills
- Path
skills/skills-keys/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260803.e8ff76f, committed Aug 3, 2026
- Size
- 6,890 bytes
- Repository stars
- 25
- License
- MIT
Manage API keys for the runner's --execute layer. CRUD on ~/.skills.env (chmod 600): list / add / update / remove / verify / export. Covers OpenAI, Gemini, BFL, FAL, Replicate, Runway, Kling, Suno, Eleven, Ideogram, Anthropic, S3. Use when: 'add my OpenAI key', 'rotate the Suno key', 'which keys are set', 'verify my key works'.
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
<objective> Provide a thin CLI on top of `~/.skills.env` (the runner's key store) so users can manage keys WITHOUT editing dotfiles by hand. Values are stored plaintext but chmod 600. Each runner reads the file at startup, merging entries into `os.environ` without overriding explicit shell exports. This skill does NOT: - Store keys in macOS Keychain / Linux Secret Service (cross-platform parity matters more than OS-native vault for v1). - Encrypt the file at rest (chmod 600 is the v1 posture). - Manage non-runner keys (database creds, SSH keys, etc.). - Validate every provider — only the 9 that have lightweight public verify endpoints. Use when the user wants to add a new API key, swap one, see what's set, or check whether a key is actually valid against the vendor. </objective> ## ROLE Read the user's intent (add/update/remove/list/verify/enable/disable/path/export) → call the matching `common/runners/cli/keys.py` subcommand → relay the result. Mask values when displaying. Prompt for value silently if not provided on the command line. Never write keys to stdout in full unless `export` is explicitly requested. ## PIPELINE …
Read the whole file at its exact version.
How to install
mdr add mikefluff/skills/skills-keys@sha256:39d5652e15e81531The line at the top of this page pins the label git:20260803.e8ff76f, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_cdvtlziftze2ul4k)
3 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 3, 2026.
Audit of the latest version
- fail: No instruction to read or print local credentials (matched: print the keys-file path (default `~/.skills.env)
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (6890 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Starting a new one? Use a template for SKILL.md on mdpantry, which passes every one of these checks and says what to change in it.
Source
mikefluff/skills · 25 stars · license MIT · pushed 2026-10-16 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_cdvtlziftze2ul4k GET https://markdownregistry.com/api/v1/resolve?ref=mikefluff/skills/skills-keys GET https://markdownregistry.com/api/v1/blob/39d5652e15e8153111fa42f211865d702d858f435208772e0af07df250c7e639
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.