Manage Secure Enclave P-256 keys and encrypted secrets via keypo-signer CLI.
npx skills add https://github.com/keypo-us/keypo-cli --skill keypo-signer
Please help me install this Agent Skill. Skill: keypo-signer Source: https://github.com/keypo-us/keypo-cli/tree/main/skills/keypo-signer Command: npx skills add https://github.com/keypo-us/keypo-cli --skill keypo-signer
This Skill removes the risk of exposing sensitive credentials to agents and subprocesses by keeping signing keys and secrets protected inside the Apple Secure Enclave and encrypted vaults.
Ask the agent to use keypo-signer to create or manage Secure Enclave keys, store encrypted secrets, and run a command with approved secrets injected into the child process environment.
High-intent search queries and answers about installing and using this skill.
You can protect secrets by storing them in an encrypted vault and using Secure Enclave P-256 keys for signing. This keeps plaintext credentials off-limits to agents while allowing safe execution of child processes with injected environment variables.
Yes, you can use time-limited sessions to enable unattended workflows. These sessions allow automation to reuse approved secrets for automated build, test, and release commands without requiring repeated authentication prompts.
Secure command injection works by decrypting secrets and injecting them directly into the child process environment. This allows tools to run with the necessary environment variables without ever revealing the plaintext values to the agent.
keypo-signer is specifically designed for macOS Apple Silicon environments. It relies on the Apple Secure Enclave to manage hardware-bound P-256 signing keys and execute policy-aware vault and session commands safely.
The best way is to use the built-in backup and restore commands provided by the keypo-signer CLI. This allows you to securely store, update, import, back up, and restore encrypted secrets so they never appear in plaintext on disk.
You can create, list, inspect, rotate, verify, and delete hardware-bound P-256 signing keys using the keypo-signer CLI. This manages the keys directly within the Apple Secure Enclave to ensure they remain protected.
keypo-usManage Secure Enclave-backed wallet keys and submit EVM transactions.
AllBeingsFutureExecute shell commands with configurable working directory and timeout.
AraflyAudit secret storage, injection, rotation, and protection without exposing values.
elasticdotventuresAutomate loading of per-project environment variables via direnv and dotenv with Rust validation.
