locker

Encrypt and manage secrets locally with an OS keychain master key.

2|Updated Feb 12, 2026
One-click install
npx skills add https://github.com/samdengler/guppi-skills --skill locker
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: locker
Source: https://github.com/samdengler/guppi-skills/tree/main/locker
Command: npx skills add https://github.com/samdengler/guppi-skills --skill locker

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires typer, rich, cryptography, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a centralized and secure method for storing sensitive information like API tokens and passwords, preventing them from being scattered across environment variables or plaintext files.

Core Features & Use Cases

  • Deterministic Secret Storage: Encrypts secrets locally using a master key stored in the OS keychain.
  • Service-Based Namespacing: Organizes secrets by service (e.g., 'courier', 'snapper') and key for easy management.
  • Use Case: Securely store your Telegram bot token for the 'courier' skill, ensuring it's accessible only when needed and never exposed in logs or code.

Quick Start

Initialize the locker and then set a secret for the courier service with the key handoffs.

Frequently Asked Questions about locker

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely store API tokens locally without using environment variables?

Secure API token storage is achieved by encrypting secrets locally with a master key kept in the OS keychain. This prevents sensitive credentials from being scattered across environment variables or plaintext files.

How does local secret encryption using the OS keychain work?

Local secret encryption works by storing a master key in the operating system keychain, which is then used to encrypt and decrypt secrets. This ensures centralized credential management without relying on external dependencies.

Can I organize and retrieve secrets by service name for different applications?

Yes, you can organize secrets by service and key for deterministic retrieval. This service-based namespacing allows you to manage credentials for multiple applications, like storing a Telegram bot token under the courier service.

What is the best way to manage credentials for automated scripts without hardcoding passwords?

The best way to manage credentials for scripts is using deterministic secret storage that encrypts data locally. You can set, get, delete, and list secrets by service and key, ensuring passwords are never exposed in logs or code.

Do I need to install Python packages like cryptography and rich to use secure secret storage?

Yes, this secret storage approach requires Python dependencies including typer, rich, and cryptography to handle CLI interactions, terminal formatting, and the actual encryption of your secrets.

Why use OS keychain-based encryption instead of plaintext configuration files for API tokens?

OS keychain-based encryption secures your API tokens locally, preventing exposure in plaintext files or code. It provides centralized, encrypted credential management accessible only when needed during execution.