qring

Plugin qring from marketplace q-ring in I4cTime/q-ring. Commands read from the repo's manifest — today.

Skills (6)

• exec-with-secrets

  Run shell commands with secrets injected from q-ring with stdout/stderr redaction and policy checks. Use when the user wants to run tests, migrations, or CLIs that need API keys without pasting secrets into the shell or .env.

• project-onboarding

  Set up q-ring for a new project — create manifests, detect environments, import secrets, configure hooks and policy. Use when the user starts a new project, mentions .q-ring.json, project manifest, environment detection, or initial secret setup.

• secret-hygiene-rules

  Always-on q-ring rules — never hardcode credentials, route every secret operation through the q-ring MCP tools, and handle .env files safely. Use when writing or reviewing code that touches API keys, tokens, passwords, connection strings, or .env files, and before any shell command that would carry

• secret-management

  Manage secrets stored in q-ring — store, retrieve, list, inspect, import, export, and configure superposition, decay, entanglement, and tags. Use when the user mentions secrets, API keys, tokens, credentials, environment variables, .env files, or asks to store/retrieve/delete a value securely.

• secret-rotation

  Validate, rotate, and batch-check secrets against their providers. Use when the user mentions expired keys, secret rotation, validation, CI secret checks, stale credentials, or provider liveness testing.

• secret-scanning

  Scan and lint codebases for hardcoded secrets using entropy analysis and regex heuristics. Use when the user asks to find leaked credentials, audit code for secrets, migrate hardcoded values to q-ring, or clean up a codebase before committing.

Slash commands (8)

• /qring:qring-analyze

  Run q-ring usage / optimization analysis — heavy keys, unused entries, decay risks.

• /qring:qring-dashboard

  Start the q-ring local status dashboard (SSE + browser UI) for live secret/health monitoring.

• /qring:qring-exec-safe

  Run a shell command with q-ring-injected secrets and stdout/stderr redaction.

• /qring:qring-health-check

  Run a comprehensive q-ring health check — decay, anomalies, and audit chain integrity.

• /qring:qring-rotate-expired

  Find expired and stale secrets and attempt automatic rotation via their providers.

• /qring:qring-scan-secrets

  Scan the workspace for hardcoded secrets, then offer to auto-fix them with q-ring.

• /qring:qring-setup-project

  Initialize q-ring for the current project — detect environment, create manifest, import .env, set up hooks.

• /qring:qring-teleport-secrets

  Pack secrets into an encrypted bundle or unpack a received bundle for cross-machine transfer.

Subagents (2)

• secret-ops

  Day-to-day secret operations assistant. Use proactively when the user wants to store, retrieve, generate, share, organize, or transfer secrets — API keys, tokens, credentials, .env values. Handles superposition (multi-environment), entanglement (linked rotation), tunnels (ephemeral), and teleport (e

• security-auditor

  Proactive security monitoring agent for q-ring. Use proactively when the user mentions security audit, anomaly detection, audit log integrity, governance policy, or wants a periodic check on the project's secret posture. Verifies the tamper-evident audit chain, surfaces stale or expired credentials,

MCP servers (1)

• q-ring

  runs: qring-mcp

Hooks (3)

• PostToolUse

  ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/qring-post-edit-lint-hint.sh

• PreToolUse

  ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/qring-pre-bash-env-guard.sh

• SessionStart

  ${CLAUDE_PLUGIN_ROOT}/hooks/scripts/qring-session-start.sh

Similar plugins