AgentStack
Browse Sign in
Browse Why AgentStack Sell Docs
Sign in
SKILL verified MIT Self-run

Nf Direnv

skill-llawliet11-claude-skills-toolkit-nf-direnv · by llawliet11

This skill should be used when the user asks to "set up direnv", "configure .envrc", "add gh token to env", or runs `/nf-direnv` in a git repo. Picks a gh account (inferred from the git remote owner), writes `.envrc` with a dynamic `$(gh auth token --user <account>)` export, runs `direnv allow`, and ensures `.envrc` is gitignored.

↗ Repository
— No reviews yet
0 installs
12 views
0.0% view→install

Install

$ agentstack add skill-llawliet11-claude-skills-toolkit-nf-direnv

✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.

Security review

✓ Passed

No issues found. Passed automated security review. · v0.1.0 How review works →

  • ✓ Prompt-injection patterns
  • ✓ Secret / credential exfiltration
  • ✓ Dangerous shell & filesystem operations
  • ✓ Untrusted network calls
  • ✓ Known-malicious package signatures

What it can access

  • ✓ Network access No
  • ✓ Filesystem access No
  • ✓ Shell / process execution No
  • ✓ Environment & secrets No
  • ✓ Dynamic code execution No

From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.

View the full security report →

Verified badge

Passed review? Show it. Paste this badge into your README, it links to the public security report.

AgentStack Verified badge Links to your public security report.
[![AgentStack Verified](https://agentstack.voostack.com/badges/verified.svg)](https://agentstack.voostack.com/security/report/skill-llawliet11-claude-skills-toolkit-nf-direnv)

Reliability & compatibility

✓ Security review passed
0 installs to date
— no reviews yet
● 1mo ago

Declared compatibility

Claude CodeClaude Desktop

Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.

Preview Execution monitoring

We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.

How agent discovery & health will work →
Are you the author of Nf Direnv? Claim this listing to set pricing, connect Stripe payouts, and keep 70% of every sale.
Sign up to claim

About

nf-direnv

Set up .envrc in the current git repo with GH_TOKEN derived from a chosen gh account. The token stays dynamic — no plaintext in the file, rotation is automatic.

Workflow

  1. Check + list accounts — run scripts/setup.sh check. Returns JSON {direnv, git, accounts, default, remote}.
  • direnv: false → STOP. Tell user brew install direnv.
  • git: false → STOP. Skill needs a git repo.
  • accounts: [] → STOP. Tell user gh auth login first.
  1. Pick account — present accounts via AskUserQuestion. Pre-select default (script infers it from remote owner; empty string means no confident default — make the user choose).
  1. Preview — run scripts/setup.sh preview . Show output verbatim (BEFORE / AFTER / DIFF). Ask user to confirm before writing.
  1. Apply — on confirm, run scripts/setup.sh apply . Script writes .envrc, runs direnv allow, and ensures .envrc is in .gitignore.
  1. Commit .gitignore — if the script reported it added .envrc, ask user to commit per your project's git conventions (branch check, ticket ID, prefix). NEVER commit .envrc itself.

Account → owner mapping

scripts/setup.sh maps git-remote owner → default account:

| Owner pattern | Account | |---|---| | acme*, Acme* | acme-bot | | widgetco*, WidgetCo* | widgetco-bot | | my-personal-account or no remote | my-personal-account | | (unknown) | empty — user must pick |

Edit infer_default in scripts/setup.sh when adding a new account or org.

Rules

  • NEVER hardcode tokens. The script always emits $(gh auth token --user ...) so direnv resolves at load time.
  • NEVER proceed past steps 2 and 3 without explicit user confirmation.
  • .envrc MUST stay gitignored — per-developer config; account choice varies per machine.
  • If gh auth token fails when direnv loads, user runs gh auth login then direnv reload.

Resources

  • scripts/setup.sh — orchestrator with subcommands check | preview | apply . Handles preflight, account inference, in-place GH_TOKEN replacement, idempotent .gitignore.

Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

Install and usage instructions live in the source repository linked above.

Reviews

No reviews yet, be the first.

Write a review

Versions

  • v0.1.0 Imported from the upstream source.

More in Agent Skills