Store and retrieve credentials in macOS Keychain with GF(3) lifecycle enforcement.
npx skills add https://github.com/plurigrid/asi --skill keychain-secure
Please help me install this Agent Skill. Skill: keychain-secure Source: https://github.com/plurigrid/asi/tree/main/skills/keychain-secure Command: npx skills add https://github.com/plurigrid/asi --skill keychain-secure
This Skill provides secure credential storage on macOS with GF(3) balance, ensuring a credential's lifecycle (store, retrieve, validate) maintains invariants and avoids leaking secrets via environment variables.
Store a credential with security add-generic-password -s "service" -a "$USER" -w "secret" -U, then retrieve with security find-generic-password -s "service" -a "$USER" -w and validate it matches the stored value.
High-intent search queries and answers about installing and using this skill.
Store credentials securely in macOS Keychain using the security command or programmatic APIs. Keychain encrypts secrets on disk and prevents accidental exposure via environment variables, keeping sensitive data isolated from shell history and process inspection.
GF(3) balance enforces three lifecycle stages—store, retrieve, and validate—as mandatory steps for every credential operation. This ensures credentials are encrypted at rest, validated before use, and prevents shortcuts that leak secrets or bypass security checks.
Yes. This Skill provides Python and Ruby APIs to retrieve credentials, validate them, and store updated versions safely. Rotation happens through Keychain without exposing secrets to shell or temporary files.
Yes. Keychain supports ACL-based access control so you can restrict which applications and users can retrieve specific credentials, enforcing fine-grained permissions across your credential store.
Retrieve the credential from Keychain using the security command or language-specific APIs, validate it against stored metadata, then pass it directly to API calls. The Skill provides cross-language examples for Python and Ruby integration.
Environment variables leak secrets through shell history, process listings, and log files. Keychain avoids this by encrypting credentials on disk and loading them only when applications request them with proper validation.
mouratoStore and retrieve API keys, tokens, and passwords via macOS Keychain services.
wesleyegbertoManage and rotate credentials in CI/CD pipelines with HashiCorp Vault and cloud secret managers.
KentoShimizuAutomate inventory, rotation, and auditability of API keys and certificates.
ollieb89Manage CI/CD pipeline secrets with Vault or AWS Secrets Manager.
