跳到主要内容
知仓学习社ZHICANG

configuration-migrator

Migrate configuration files between formats and versions with environment variable extraction

读凭据严重 2 · 高危 0a5c-ai/babysitter

它会碰到什么

扫了多少2 个文本文件,4 KB
它会碰到什么读凭据
命中总数2 处
命中统计严重 2 · 高 0 · 中 0 · 低 0
逐条看命中(2 条严重或高危)
  • 严重 README.md:29cred-paths
    - Create .env template
  • 严重 README.md:64cred-paths
    "envFileOutput": "./.env.template"

这一栏是扫描器报的事实,不是结论。命中多不等于有毒(安全工具、规则库、示例脚本本来就会包含危险写法),命中少也不等于干净。它和你手上的凭据、文件、网络有什么关系,需要你自己看。

技能内容

Configuration Migrator Skill

Migrates configuration files between different formats and versions, handles environment variable extraction, and manages secret detection.

Purpose

Enable configuration migration for:

  • Config format conversion
  • Environment variable extraction
  • Secret detection and handling
  • Schema validation
  • Template generation

Capabilities

1. Config Format Conversion

  • XML to YAML/JSON
  • Properties to YAML
  • INI to JSON
  • TOML conversion
  • ENV file handling

2. Environment Variable Extraction

  • Identify environment-specific values
  • Extract to env files
  • Create variable references
  • Document variables

3. Secret Detection

  • Find hardcoded secrets
  • Identify credentials
  • Detect API keys
  • Flag sensitive data

4. Schema Validation

  • Validate against schemas
  • Check required fields
  • Verify data types
  • Ensure compatibility

5. Default Value Handling

  • Preserve defaults
  • Document required overrides
  • Create sensible defaults
  • Handle missing values

6. Template Generation

  • Create config templates
  • Generate example files
  • Document all options
  • Support multiple environments

Tool Integrations

| Tool | Purpose | Integration Method |

|------|---------|-------------------|

| yq | YAML processing | CLI |

| jq | JSON processing | CLI |

| dotenv | ENV file handling | Library |

| git-secrets | Secret detection | CLI |

| Config validators | Schema validation | CLI |

Output Schema

{
  "migrationId": "string",
  "timestamp": "ISO8601",
  "source": {
    "format": "string",
    "path": "string"
  },
  "target": {
    "format": "string",
    "path": "string"
  },
  "conversions": [
    {
      "sourceKey": "string",
      "targetKey": "string",
      "transformation": "string"
    }
  ],
  "extracted": {
    "envVariables": [],
    "secrets": []
  },
  "validation": {
    "valid": "boolean",
    "errors": [],
    "warnings": []
  }
}

Integration with Migration Processes

  • configuration-migration: Primary tool
  • framework-upgrade: Config version updates
  • cloud-migration: Cloud config adaptation

Related Skills

  • compliance-validator: Secret compliance

Related Agents

  • configuration-centralization-agent: Config modernization

想直接用这个技能?

本站把开放许可(MIT / Apache 等)的技能按仓库打包整理到网盘,点一下转存到你自己的网盘,不用一个个从 GitHub 拉。许可未声明的技能只给原始仓库链接,不打包。

它属于哪个仓库

星标★ 1,796
本站分层T1
该仓技能数2115
原文件路径library/specializations/code-migration-modernization/skills/configuration-migrator/SKILL.md

同一个仓库里的其他技能

看这个仓库的全部 2115 个技能