Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx skills add contactandrewchl-wq/turtle-mcp --skill security-secretsgit clone --depth 1 https://github.com/contactandrewchl-wq/turtle-mcpWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/contactandrewchl-wq/turtle-mcp/security-secrets)<a href="https://agentmods.dev/skills/contactandrewchl-wq/turtle-mcp/security-secrets"><img src="https://agentmods.dev/badge/skills/contactandrewchl-wq/turtle-mcp/security-secrets/github.svg" alt="Measured on agentmods" height="20"></a>Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.
<a href="https://agentmods.dev/skills/contactandrewchl-wq/turtle-mcp/security-secrets"><img src="https://agentmods.dev/badge/skills/contactandrewchl-wq/turtle-mcp/security-secrets.svg" alt="Reviewed on agentmods" width="80" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5.1 | $0.00063 | $0.01085 |
| Opus 5 | $0.00032 | $0.00543 |
| Sonnet 5 | $0.00013 | $0.00217 |
| Haiku 4.5 | $0.00006 | $0.00109 |
Grade A, and why
security-secrets scanned grade A with 1 finding against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 10d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Asks for rootlowPrivilege escalation
A mod that escalates privileges can change anything on the machine, not only the project.
- `chmod 600` en archivos con secretos. Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.
How it starts
The opening of the file, as written. The whole thing — 106 lines — stays where its author put it; the contents beside it link to each section on GitHub.
Manejo de secretos
Cuándo usar
- Introducir o rotar un secreto (API key, token, conexión a BD, clave de firma).
- Encontrar un secreto commiteado en el repo o en los logs.
- Diseñar el flujo de despliegue.
Reglas duras
- NUNCA commitear secretos. Ni de "test", ni de "staging", ni "es solo lectura".
- NUNCA en logs, mensajes de error, tickets, chats, prompts a un agente.
- NUNCA como argumento de CLI (queda en
ps, en history). Usá--secret-fileo stdin. - NUNCA en URL (queda en logs de proxy, navegador, referrer).
- NUNCA un único secreto compartido por persona. Identidad por persona/servicio.
Dónde guardarlos
Por orden de preferencia:
- Gestor dedicado: HashiCorp Vault, AWS Secrets Manager, GCP Secret Manager, Azure Key Vault, Doppler, 1Password Secrets Automation.
- Variables de entorno inyectadas por el orquestador (Kubernetes Secrets + sealed-secrets, Docker secrets, systemd
EnvironmentFilecon permisos restrictivos). - Archivo
.envlocal solo para desarrollo, en.gitignore, nunca subido.
.env
.gitignoreincluye.env,.env.*,*.pem,*.key,id_rsa*,secrets.*.- Commiteá
.env.examplecon claves vacías, sin valores. chmod 600en archivos con secretos.
Rotación
- Toda credencial tiene fecha de expiración y un dueño.
- Rotá: al sospechar fuga, al irse alguien con acceso, periódicamente (≤90 días para producción).
- Diseñá la app para tolerar dos secretos válidos a la vez durante la rotación (old + new), para no romper en el corte.
Detección de fugas
- Pre-commit hook:
gitleaksotrufflehog. - CI: scan en cada PR.
- Server-side: GitHub/GitLab secret scanning activado.
- Monitor de público: alertas si tu organización aparece en gitleaks/trufflehog feeds.
Si se filtra uno
- Asumí compromiso. Si estuvo en GitHub público aunque sea 1 min, asumilo.
- Rotá ya. No esperes "a ver si alguien lo usó".
- Revocá el viejo. No solo crear nuevo.
- Auditá uso: logs del servicio para ver si hubo acceso anómalo desde que se expuso.
- Reescribir historia del git (BFG / git-filter-repo) no reemplaza la rotación. El secreto ya salió.
- Postmortem: ¿cómo entró al repo? Bloquear la causa.
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 10d ago First seen · 106 lines · 63 tokens per session scan A 700019b9446d
security-secrets is a skill published in the GitHub repository contactandrewchl-wq/turtle-mcp (2 stars, last pushed 2mo ago), licensed MIT. It adds 63 tokens to every session and 1,085 once invoked, about $0.0003 per session on Opus 5. A static security scan graded it A with 1 finding (asks for root). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.
Other skills, from other repositories
gno
Search local documents, files, notes, and knowledge bases. Index directories, search with BM25/vector/hybrid, get AI answers with citations. Use when user wants to search files, find documents, query notes, look up information in local folders, index a directory, set up document search, build a knowledge base, needs…
engram-memory
Give the agent durable, local memory with engram — recall past decisions before answering, and persist new decisions, preferences and facts as they happen. Use when work spans sessions or the user says "remember".
simplicio-loop
Unified public entrypoint for Simplicio's body-of-work orchestration: core + loop in one command. Use when the user types /simplicio-loop, says "ralph loop", "keep iterating until done", "finish all open issues", or asks to drain a queue of work autonomously. Runtime-agnostic: binds a real stop-hook where the host…
simplicio-nest-gate
N-Nest protocol — multi-level gate-corrected agent tree. PRIME depth verification, BH port.port.port addressing, per-level confabulation catch.
simplicio-orient
Terminal-first execution — answer facts with the shell, never with the LLM. Use whenever a step needs a fact about the filesystem, git, processes, or system resources, or runs a build/test/lint/diff whose output would flood context. Substitutes deterministic shell/CLI calls for native LLM operations and clamps their…
simplicio-autoresearch
Evolutionary optimize-by-metric loop — mutate a target, evaluate against fixed criteria, KEEP if the score improves (commit) or REVERT if it doesn't (git checkout), repeat, plateau-break after N stagnated runs. Adapts Karpathy's autoresearch pattern (and the ECC autoresearch-agent) with mandatory yool guardrails (§11…