keepassxc

Retrieves secrets from KeePassXC via the VMCast protocol.

2|Updated Jul 26, 2025
One-click install
npx skills add https://github.com/fullykubed/nixos-config --skill keepassxc
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: keepassxc
Source: https://github.com/fullykubed/nixos-config/tree/main/modules/common/claude/skills/KeePassXC
Command: npx skills add https://github.com/fullykubed/nixos-config --skill keepassxc

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires secret-tool, jq, grep, awk, and includes scripts (resource) components.

What problem does it solve?

You retrieve secrets from an unlocked KeePassXC database via the FDO Secret Service API using secret-tool. Only entries in KeePassXC groups explicitly exposed for Secret Service access are available.

Core Features & Use Cases

  • Lookup secrets by Title using claude-KeePassXC-search and claude-KeePassXC-lookup commands.
  • Ensure KeePassXC is running and unlocked; handles errors and reports status to the user.
  • Provides safe handling by never exposing secret values in responses.

Quick Start

Retrieve a KeePassXC secret by title with claude-KeePassXC-lookup <entry-title>.

Frequently Asked Questions about keepassxc

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I retrieve KeePassXC secrets via the FDO Secret Service in Linux?

You can retrieve KeePassXC secrets via the FDO Secret Service by using the `secret-tool` command. This integration allows automated agents to securely fetch credentials from an unlocked KeePassXC database.

How do I list available credentials in KeePassXC exposed to Secret Service?

You can list available credentials by running the `claude-KeePassXC-search` command. This queries the FDO Secret Service to return non-secret metadata for entries in KeePassXC groups explicitly exposed for access.

Does the KeePassXC Secret Service integration expose actual passwords in the response?

No, the KeePassXC Secret Service integration never exposes actual passwords in responses. It sanitizes all secrets and returns only non-secret metadata to protect sensitive data during automated credential lookups.

What do I need to use secret-tool for automated credential lookups from KeePassXC?

You need the KeePassXC application running and unlocked, with specific groups exposed for Secret Service access. Dependencies like `secret-tool`, `jq`, `grep`, and `awk` must also be installed on your Linux system.

Why does my KeePassXC secret lookup return no results?

A KeePassXC secret lookup returns no results if the database is locked, the application is not running, or the desired entry is not within a KeePassXC group explicitly exposed for FDO Secret Service access.

Can I use secret-tool to look up a specific KeePassXC entry by title?

Yes, you can look up a specific KeePassXC entry by title using the `claude-KeePassXC-lookup <entry-title>` command, which performs an exact credential lookup via the FDO Secret Service API.