macos-keychain-secrets

Secrets stored in the macOS Keychain are retrieved at runtime through secure prompts and exported to shell environment variables, allowing seamless CLI workflows without persisting credentials in plain text files.

Yes, this skill integrates macOS Keychain credentials directly into your shell environment by exporting secrets to environment variables, enabling seamless CLI workflows and local development without exposing plain text credentials.

Using the macOS Keychain is a secure way to manage local development secrets, preventing API keys and credentials from leaking. It relies on the macOS security CLI to safely store and retrieve sensitive values.

No external password managers are required. This skill relies entirely on the built-in macOS security CLI to validate inputs, manage credentials, and update shell configuration with safeguards.

You can securely delete an expired credential from macOS Keychain using the skill's interactive secret deletion feature, which safely removes API keys and updates your shell configuration accordingly.

You should avoid plain text files for shell secrets when there is a risk of committing them to git. Using macOS Keychain prevents credential leakage by relying on the security CLI and secure runtime prompts.