keepass-credential-ssh

Resolves SSH keys via KeePass vaults, local files, or the SSH agent.

6|1|Updated Feb 16, 2026
One-click install
npx skills add https://github.com/L3DigitalNet/Claude-Code-Plugins --skill keepass-credential-ssh
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: keepass-credential-ssh
Source: https://github.com/L3DigitalNet/Claude-Code-Plugins/tree/main/plugins/keepass-cred-mgr/skills/keepass-credential-ssh
Command: npx skills add https://github.com/L3DigitalNet/Claude-Code-Plugins --skill keepass-credential-ssh

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill streamlines the secure handling of SSH keys, ensuring that keys are only accessed when necessary and are managed efficiently through secure vaults and local agents.

Core Features & Use Cases

  • Agent-First Resolution: Prioritizes using keys already loaded in the SSH agent.
  • Local File Check: Checks for existing keys in ~/.ssh before vault access.
  • Secure Vault Retrieval: Fetches keys from KeePass when not found locally or in the agent.
  • Use Case: When connecting to a remote server via SSH, this skill ensures your SSH key is used securely, either from your agent, local files, or a KeePass vault, preventing unnecessary exposure of sensitive credentials.

Quick Start

Use the keepass-credential-ssh skill to retrieve the SSH private key for the host 'example.com'.

Frequently Asked Questions about keepass-credential-ssh

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve an SSH key from KeePass for remote server access?

To retrieve an SSH key from KeePass, the system first checks the SSH agent and local files in ~/.ssh before fetching the key from the secure vault, ensuring credentials are accessed only when necessary.

What is the best way to manage SSH keys using an agent and secure vault?

The best way to manage SSH keys is an agent-first resolution approach that checks loaded keys, verifies local ~/.ssh files, and finally provisions keys from a KeePass vault to prevent credential exposure.

Does SSH key provisioning check local files before accessing the KeePass vault?

Yes, SSH key provisioning checks local files in the ~/.ssh directory before accessing the KeePass vault, prioritizing existing local credentials and agent-loaded keys to minimize vault access.

Can I use this approach to securely connect to remote servers without exposing private keys?

Yes, you can securely connect to remote servers by retrieving SSH private keys through agent-first resolution or local fallback, ensuring sensitive credentials are only fetched from the KeePass vault when necessary.

Why does SSH key resolution prioritize the SSH agent over the KeePass vault?

SSH key resolution prioritizes the SSH agent to use already loaded keys, reducing unnecessary vault access and limiting credential exposure, only falling back to KeePass when local and agent checks fail.