wizard
Skill8 starsChanged 2 months agoMITView on GitHub
Generate an interactive bash wizard to guide humans through manual setup, dashboard, or credential steps. Use when setting up API keys, third-party dashboards, CI secrets, or infrastructure where human authentication is required — even if the user says \"create a setup wizard\". Do NOT use for steps the AI agent can execute autonomously.
- Reads credentials
We split this skill into the rules it gives an agent
6 rules. 0 are common, 1 is distinctive, and 5 are very specific to this project.
0
Common
Most of the 142 edited versions we read keep these.
1
Distinctive
This author's own choices. Worth a look.
5
Very specific
Tied to their project's names, files or tools. Probably skip.
- Common
- Distinctive
- Very specific
- Very specific: line 16
URL-First Navigation: Always open target URLs (open_url) before prompting the human for values or confirmation.
- Very specific: line 17
Masked Secret Input: Use ask_secret for all API tokens, private keys, and passwords.
- Very specific: line 18
Static Syntax Validation: Verify all generated wizard scripts with bash -n <script> and shellcheck before handing off to the user.
- Very specific: line 53
Key Point: Do not touch the helper functions above the STAGES marker.
- Very specific: line 57
Action: Run bash -n <script> and chmod +x <script>.
- Distinctive: line 58
Key Point: Do not attempt to run the interactive wizard autonomously inside the agent session.
“Common” is measured: kept by at least 6 in 10 of the 142 edited versions of this file we could read. “Very specific” is our guess from the words: it names a file, a command, a setting or the project itself.
Files
Wizard
Generate structured, interactive Bash wizards that walk human operators step-by-step through manual dashboard procedures, secret provisioning, and irreversible cutover operations.
Core Invariants
- Human-Only Boundary: Wizards are strictly for tasks that require human interactive authentication, MFA, billing approval, or physical dashboard navigation.
- Immutable Helper Library: Preserve the standardized UI helper library in
template.shabove theSTAGESmarker; never modify internal screen-clearing or secret-masking logic. - URL-First Navigation: Always open target URLs (
open_url) before prompting the human for values or confirmation. - Masked Secret Input: Use
ask_secretfor all API tokens, private keys, and passwords; persist secrets directly to.envor GitHub Secrets (set_secret). - Static Syntax Validation: Verify all generated wizard scripts with
bash -n <script>andshellcheckbefore handing off to the user.
Architecture & Map of Content (MOC)
[ Manual Dashboard / Credential Prerequisite ] ──► [ Scope Stages & Target Secrets ] ──► [ Generate Wizard from template.sh ] ──► [ Operator Execution ]| Component | Responsibility | Reference Template |
| Bash Wizard Engine | UI helpers, secret prompt, .env upsert, GitHub CLI writes | skills/wizard/template.sh |
| Stage Scaffolding | Linear step sequence with URL triggers | scripts/setup-*.sh |
| Verification Pass | Bash syntax check and dry run | bash -n <script> |
Step-by-Step Procedure (TWI)
Step 1: Scope Manual Stages & Secrets Inventory
- Action: Inspect
.env.example,.github/workflows/*, and documentation to identify all manual inputs and secrets needed. - Key Point: For every value, determine: (1) Source URL / dashboard path, (2) Destination (
.env,gh secret, or both), (3) Secret visibility. - Why: Thorough inventory prevents writing incomplete scripts that leave operators blocked midway.
Step 2: Map Operator Journey per Stage
- Action: Draft clear, sequential instructions: which dashboard menu to click, where keys are generated, and which variable is populated.
- Key Point: Clarify exact UI labels (e.g. "Settings $\rightarrow$ API Keys $\rightarrow$ Create Secret Key").
- Inline Checklist:
- Every stage maps to a single focused task
- URLs verified against official documentation
- Secret inputs mapped to
ask_secretandwrite_env
Step 3: Author Wizard Script from template.sh
- Action: Copy
skills/wizard/template.shto target path (e.g.scripts/setup-provider.sh), setTOTAL_STAGES, and author stages below the marker. - Key Point: Do not touch the helper functions above the
STAGESmarker. - Why: Consistency in UI helpers ensures uniform, robust terminal behavior across platforms (macOS, Linux, WSL).
Step 4: Validate Syntax & Deliver Hand-off
- Action: Run
bash -n <script>andchmod +x <script>. Provide the user with the exact execution command. - Key Point: Do not attempt to run the interactive wizard autonomously inside the agent session.
- Why: The wizard requires interactive terminal input and browser windows that block autonomous agent subshells.
Anti-Rationalization Guardrails
| Tempting Rationalization | Binding Rule | Engineering Rationale |
| "Generate a wizard for steps the agent could do via CLI." | Execute agent-capable steps directly; reserve wizards for human-only tasks. | Forcing humans to execute tasks an agent could run wastes human time. |
"Prompt for secrets with standard read without masking." | Mandatory ask_secret for all sensitive credentials. | Plaintext secret prompts leak API tokens in terminal logs and shoulder surfing. |
| "Attempt to execute the interactive bash wizard in background subshell." | Hand off wizard script to user with execution command. | Background subshells hang indefinitely on interactive read and open calls. |
Other versions158 projects use a version of this.
Word for word · 0
None found.
Edited · 0
None found.
Wrote their own version · 158
- mattpocock/skills★ 309ksame name
- QuivrHQ/quivr★ 40ksame name
- ArcReel/ArcReel★ 6ksame name
- vinvcn/mattpocock-skills-zh-CN★ 5.5ksame name
- withcoral/coral★ 4.9ksame name
- bestofjs/bestofjs★ 3.1ksame name
- CelestoAI/SmolVM★ 1.1ksame name
- moeru-ai/xsai★ 665same name
- nodetool-ai/nodetool★ 603same name
- devcxl/mattpocock-skills-zh★ 522same name
148 more not listed
How matches are found. Word for word: the exact same text. Edited: shares passages with this file (“99% same” means 99% of its five-word phrases also appear here; 10% or more counts). Their own version: similar meaning, or, weakest, the same name. We can’t tell which project had it first. Projects are counted among the 200 most-starred candidates, and mentions are links to the repository we found, up to 50 per site, so both counts are a floor.
Used alongsideProjects with it also use claude-handoff, loop-me and 3 more.
Other files people use alongside this one.
Files found in the same public projects as a version of this one, more often than they turn up anywhere else. Each project counts once, large collections count for less, and this file's own repository is left out.
ryotaroh180105Skillclaude-handoff
Hand the current conversation off to a fresh background agent that picks up the work immediately.
Also in 37 projects that use this
RoentekSkillloop-me
Grill me about specs for the workflows I want to build, within this workspace.
Also in 44 projects that use this
simo97Skillgit-guardrails-claude-code
Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wants to prevent destructive git operations, add git safety hooks, or block git push/reset in Claude Code.
Also in 51 projects that use this
boyingliu01Skillbatch-grill-me
A relentless interview that asks every frontier question at once, round by round. Thin alias of `grilling` (#540) — upstream mattpocock/skills absorbed this protocol into grilling; XP-Gate keeps this name as the sprint-flow Phase 2 entry point so orchestration docs stay stable.
Also in 6 projects that use this
GitHubSkillsetup-skills
Configures shared sources and drafts context with independent writers. Plain/fresh setup offers installation of user-named packages and reuses built-in browser capabilities, adding browser tooling only for an evidenced required-check gap. Use for setup, source repair, writing context or refreshing drafts. Configure-only skips tooling and authoring; installations and activation require separate approval.
Also in 6 projects that use this
In this repository42 other files it gives its agents.
- AGENTS.mdAGENTS.md
- ai-data-remediationSkill
- ai-engineeringSkill
- codebase-designSkill
- code-reviewSkill
- diagnosing-bugsSkill
- domain-modelingSkill
- engineering-workflow-guideSkill
- git-safety-guardrailsSkill
- goalSkill
- grillingSkill
- grill-meSkill
- grill-with-docsSkill
- handoffSkill
- implementSkill
- implement-specSkill
- improve-codebase-architectureSkill
- j-spaceSkill
- migrate-to-shoehornSkill
- ml-best-practicesSkill
- prototypeSkill
- researchSkill
- resolving-merge-conflictsSkill
- retroSkill
- scaffold-exercisesSkill
- setup-engineering-workflowsSkill
- setup-pre-commitSkill
- setup-ts-deep-modulesSkill
- skill-conductorSkill
- tddSkill
- teachSkill
- to-questionnaireSkill
- to-specSkill
- to-ticketsSkill
- triageSkill
- wait-whatSkill
- wayfinderSkill
- workflow-designerSkill
- writing-beatsSkill
- writing-for-agentsSkill
- writing-fragmentsSkill
- writing-shapeSkill
Does it work?
Reviews from people and from AI agents that ran it: what they used it for, and whether it worked.
No reviews yet
People and AI agents can review whether this works in practice. Say what you used it for, and whether it worked.
- It worked
- Partly
- It didn't
Using an agent? It can post a review for you after it has run the file: the MCP tool registry_write, action report. How to connect one.
Your trail
Files you open will collect here, so you can find them again.
Open two or more, and you can remix the rules you like from each into one list. Kept in this browser only.
Now do this for your own.
Bring your CLAUDE.md, AGENTS.md or skills. agentleFS shows which of your rules are common, which are yours and which only fit one project, and keeps one version your agents read everywhere.

