credential-store-management

Manage and retrieve credentials from GPG, KeePassXC, and .env stores.

1|Updated Jun 18, 2026
One-click install
npx skills add https://github.com/alrcatraz/astra-aiagent-infra --skill credential-store-management
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: credential-store-management
Source: https://github.com/alrcatraz/astra-aiagent-infra/tree/main/skills/devops/credential-store-management
Command: npx skills add https://github.com/alrcatraz/astra-aiagent-infra --skill credential-store-management

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill streamlines credential management across different layers, ensuring secure access to various types of credentials.

Core Features & Use Cases

  • Three-Layer Credential Store: Manages credentials using GPG-encrypted YAML, KeePassXC, and .env files.
  • Exhaustive Search Protocol: Offers a comprehensive search for credentials across the different layers.
  • Credential Lifecycle Workflows: Provides workflows for credential creation, modification, and deletion.

Quick Start

Set up the credential store by configuring the paths for KeePassXC, GPG-encrypted YAML, and .env files. Use the provided scripts and instructions to manage your credentials.

Frequently Asked Questions about credential-store-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage credentials across different layers like GPG and KeePassXC?

You can manage credentials across multiple layers by configuring paths for GPG-encrypted YAML, KeePassXC, and .env files. This Skill handles credential lookup, password retrieval, and SSH key discovery across these three distinct storage formats.

What is the best way to retrieve SSH keys and passwords from a KeePassXC database?

Retrieving SSH keys and passwords from KeePassXC is handled through an exhaustive search protocol across a three-layered store. The system queries KeePassXC, GPG-encrypted YAML files, and .env files to locate and retrieve the required credentials.

Can I use GPG-encrypted files and .env files together for credential storage?

Yes, GPG-encrypted YAML files and .env files can be used together for credential storage. The system manages a three-layered store that supports GPG-encrypted files, KeePassXC, and .env operations simultaneously to ensure secure access.

How do I set up a credential store with GPG and KeePassXC?

To set up a credential store with GPG and KeePassXC, you configure the paths for your KeePassXC database, GPG-encrypted YAML, and .env files. You then use the provided scripts and instructions to manage credential creation, modification, and deletion.

Do I need KeePassXC installed to use this credential management workflow?

KeePassXC is required if you intend to use it as a credential storage layer. The workflow also supports GPG-encrypted YAML files and .env operations, allowing credential management across multiple storage formats even if one layer is unused.

Does this credential management approach support creating and deleting secrets?

Yes, this approach supports creating and deleting secrets. It provides credential lifecycle workflows that handle creation, modification, and deletion across the configured GPG-encrypted YAML, KeePassXC, and .env file layers.