Skip to content
Back to skills

Act Export Settings

ASecurity

Use to hand this project's setup to a new project, or to check what a settings export would reveal before sending it anywhere. Writes the project's own rule deviations, optionally scripts, checklists, agents, skills and topics, to a portable settings file.

  • 3 stars
  • 0 votes
  • 0 copies
  • 3 views
  • Added October 8, 2026
ai-agentspythongogit

Security analysis

A100/100

Scanned October 8, 2026

npx -y skills add wrufeger/agentic-coding-template --skill act-export-settings --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Act Export Settings?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Act Export Settings
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/wrufeger-act-export-settings/badge)](https://www.skillsdirectory.com/skills/wrufeger-act-export-settings)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: act-export-settings
description: Use to hand this project's setup to a new project, or to check what a settings export would reveal before sending it anywhere. Writes the project's own rule deviations, optionally scripts, checklists, agents, skills and topics, to a portable settings file.
---

# Export the project's settings

Thin wrapper around `python .act/scripts/settings_export.py` — writes what this project changed
against the template (rules/coding: own rules, switched-off groups, `replaces` overrides) into one
`settings.md`, readable and diffable. Nothing about the project itself (name, work state, the
`use:` selection) goes into it.

## Switches

- Default: only `[~]`/`[-]`/`[+]` deviations for rules + coding — `--all` also lists every
  unchanged (`[=]`) rule/group.
- `--with-scripts` / `--with-checklists` / `--with-agents` / `--with-skills`: also include
  `docs/ai/local/scripts/`, `docs/ai/local/checklists/`, this project's own roles
  (`docs/ai/local/agents/`) and its own skills (`docs/ai/local/skills/`). Any of the four forces a
  `.zip` (`--with-files`) instead of a plain `.md`, since these carry whole files alongside the
  summary line settings.md shows for each one.
- `--with-topics`: also include the topic rules under `docs/ai/local/rules/topics/` — a topic of
  the project's own as `[+] <name>.md`, an override of a template topic as `[~] <name>.md` with a
  fingerprint of the template topic it overrides. Whole files, so it forces a `.zip` as well.
- `--strict`: abort instead of substituting a placeholder — use this when the file is headed to
  people outside the project, not just another one of the human's own.
- `--out PATH`: write there instead of the default `.act-local/export/act-settings-<date>.md`/
  `.zip` (machine-local, gitignored, created on demand). The natural handover is dropping that file
  straight into another checkout's `.act-local/import/` — that's exactly what `act-load-settings`
  picks up when run with no path.
- `--profile`: write to the Owner's profile instead — the grounds a future `init` will hand to a
  fresh clone as its starting point (`init` does not read the profile yet, only this writes it).
  Same format, same switches; goes to the platform config dir (Windows `%APPDATA%\act\settings.md`,
  else `~/.config/act/settings.md`), never a path inside this project. Use it for "these are the
  personal defaults I want every future project to start with", not for handing settings to
  someone else — that is `--out`. An existing profile file is backed up next to itself
  (`settings.md.bak-<stamp>`), never silently overwritten. Mutually exclusive with `--out`.

## Steps

1. Ask which switches apply — do not guess `--with-*`: handing over scripts, checklists, topics, an own
   role, or an own skill is a deliberate choice, not a default. Ask separately whether this run
   goes to a file/another project (`--out` or the default location) or to the Owner's own profile
   (`--profile`) — the two are mutually exclusive.
2. Run the script. It scans every value it writes for credentials, mail addresses, IPs, local
   paths and internal hosts on its own and replaces a hit with a visible `<setup:KIND>` placeholder
   plus a `## setup-required` line — never a silent drop, never a silent secret.
3. **Always show the human the finding count the script prints, and remind them to skim the file
   before sending it anywhere** — the script is the second check, not the only one.
4. `--strict` failing with findings is not a bug: fix or accept each one, then decide whether to
   rerun with `--strict` or drop it for this handover.

## When not

The file is meant for another project of the same human, or for the human's own review — not a
substitute for `act-feedback` (a template-wide finding) or for handing a whole repo to someone.

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.