keypo-signer

What problem does it solve?

This Skill removes the risk of exposing sensitive credentials to agents and subprocesses by keeping signing keys and secrets protected inside the Apple Secure Enclave and encrypted vaults.

Core Features & Use Cases

• Secure key management: Create, list, inspect, rotate, verify, and delete hardware-bound P-256 signing keys.
• Encrypted secret storage: Store, update, import, back up, and restore secrets so they never appear in plaintext on disk.
• Safe command injection: Run tools with decrypted secrets injected directly into child process environments without revealing values to the agent.
• Unattended workflows: Use time-limited sessions to let automation reuse approved secrets without repeated authentication prompts.
• Use Case: A developer can protect API keys, private keys, and deployment credentials while still allowing build, test, and release commands to run with the right environment variables.

Quick Start

Ask the agent to use keypo-signer to create or manage Secure Enclave keys, store encrypted secrets, and run a command with approved secrets injected into the child process environment.