credentials

Name: credentials
Availability: InStock
Author: AIBTC

Encrypts and manages named secrets locally with AES-256-GCM and PBKDF2 key derivation.

9|43|Updated Feb 19, 2026

Search Tags:#security #credentials #aes-256-gcm #local-store #encrypt #pbkdf2

Ready to run

npx skills add https://github.com/aibtcdev/skills --skill credentials-aibtcdev

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: credentials
Source: https://github.com/aibtcdev/skills/tree/main/credentials
Command: npx skills add https://github.com/aibtcdev/skills --skill credentials-aibtcdev

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Storing API keys, tokens, passwords, and other secrets securely on a developer machine without exposing plaintext values.

Core Features & Use Cases

AES-256-GCM encrypted storage of credentials in a local file at ~/.aibtc/credentials.json
Per-credential PBKDF2-derived keys with unique salts
Supports add, get, list, delete, and rotate-password workflows
Atomic writes and strict permissioning to protect sensitive data

Quick Start

Use the credentials skill to store a new secret by running bun run credentials/credentials.ts add --id my-api-key --value secret --password <master>.

Frequently Asked Questions about credentials

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I securely store API keys and tokens locally using AES-256-GCM?▼

You can securely store API keys and tokens locally by encrypting them with AES-256-GCM in a private store at ~/.aibtc/credentials.json. This approach uses per-credential salts and PBKDF2 key derivation to protect sensitive values from plaintext exposure.

What is the best way to encrypt secrets on a developer machine without exposing plaintext?▼

Encrypting secrets on a developer machine is best handled by storing them in a local credentials file using AES-256-GCM encryption. This method ensures sensitive values are protected with PBKDF2-derived keys, unique salts, and strict file permissioning.

How do I add and retrieve named credentials from a local encrypted store?▼

To add and retrieve named credentials from a local encrypted store, use the add and get workflows provided by the credentials skill. You supply an identifier, secret value, and master password to store or retrieve data from the encrypted ~/.aibtc/credentials.json file.

Can I rotate the master password for an encrypted local credentials file?▼

Yes, you can rotate the master password for an encrypted local credentials file using the rotate-password workflow. This operation requires password verification and re-encrypts your stored secrets while maintaining data integrity through atomic writes.

Does local secret storage with PBKDF2 support atomic writes and data integrity validation?▼

Local secret storage with PBKDF2 supports atomic writes and rigorous validation to preserve data integrity. It implements strict permissioning and robust error handling to ensure encrypted credentials remain secure during add, get, list, and delete operations.