# Build Guided Bash Setup Wizards

Manual setup and migration procedures are easy to miss or repeat incorrectly. This skill creates interactive Bash wizards with guided stages, confirmations, and value handling.

## Install

```bash
npx skillstore add mattpocock/wizard
```

## Metadata

- Status: approved
- Slug: mattpocock-wizard
- Skillstore revision: r2
- Version status: missing
- Tree hash: 6f2f9a46cca913ee3b293e64e926582fa17c615dbba565bfc419241bd00d722b
- Author: mattpocock
- GitHub username: mattpocock
- License: MIT
- Repository: https://github.com/mattpocock/skills/tree/main/skills/in-progress/wizard/
- Ref: ebdfe608f5de2b66ff37ab4af12af8ac4f5e8006
- Supported tools: Claude, Codex, Claude Code
- Audit status: complete
- Agent install advisory: confirmation\_required
- Manual install advisory: allowed
- Artifact signature: available
- Audit attestation: unavailable
- Human verification: not\_verified
- Risk factors: external\_commands, network, filesystem, env\_access
- Quality score: 38
- Quality tier: warning
- Public page: https://skillstore.pages.dev/skills/mattpocock-wizard
- Manifest: https://skillstore.pages.dev/api/skills/mattpocock-wizard/manifest

## Capabilities

- Reviews repository setup files and CI references to map required values.
- Copies a reusable Bash template and authors ordered procedure stages.
- Opens browser URLs through supported Windows, WSL, Linux, and macOS commands.
- Captures visible or hidden input and reuses existing environment values.
- Upserts environment values and configures GitHub Actions secrets or variables through gh.
- Shows stage progress, remaining time, confirmations, and a closing summary.

## Use Cases

- Standardize Project Onboarding: Create a repeatable wizard that collects configuration values and guides each setup stage.
- Configure Third-Party Services: Guide dashboard navigation, capture service credentials, and place values in approved destinations.
- Control One-Time Migrations: Turn a state transition into ordered stages with confirmation before irreversible actions.

## Prompt Templates

### Create a Basic Wizard

```
Create a Bash wizard for [procedure]. Include these stages: [stages]. Save captured values to [destination]. Ask before irreversible actions.
```

### Set Up a Service

```
Build a wizard for [service]. Open the required dashboard pages. Capture [values]. Store secrets locally and in GitHub only where required.
```

### Map Repository Configuration

```
Review this repository for setup requirements. Propose ordered wizard stages and value destinations. Wait for approval before generating the script.
```

### Design a Migration Wizard

```
Create a wizard that moves [system] from [current state] to [target state]. Include validation, rollback guidance, confirmations, and a final completion summary.
```

## Limitations

- Generated wizards require human interaction and should not run unattended.
- Current web interface steps may require documentation or user confirmation.
- GitHub configuration requires an installed and authenticated gh CLI.
- Local secrets remain in plaintext environment files and require access controls.

## Best Practices

- Confirm the stage plan and every value destination before generating the wizard.
- Use hidden input for secrets and write only credentials required by each destination.
- Verify syntax statically and review every remote or irreversible action with the user.

## Anti Patterns

- Do not invent dashboard steps when current provider documentation is unavailable.
- Do not place secrets in visible prompts, logs, examples, or command arguments.
- Do not run the interactive wizard end to end without the user controlling each stage.

## Security Audit

- Audited at: 2026-07-23T17:10:13.474\+00:00
- Summary: Most command and device-file alerts are false positives caused by Markdown code spans, arithmetic expansion, fixed commands, and output redirection. Confirmed risks involve intentional environment-secret handling, authenticated GitHub configuration updates, and temporary storage of environment contents. No prompt injection or credential exfiltration intent was found.

## Stats

- Views: 0
- Downloads: 5
- Favorites: 0
- Popularity score: 0