pass-zero-secret-store

Store, retrieve, and rotate credentials in the pass-zero encrypted secret store.

2|7|Updated Jun 19, 2026
One-click install
npx skills add https://github.com/humanerd-drew/opencode-drewgent --skill pass-zero-secret-store
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pass-zero-secret-store
Source: https://github.com/humanerd-drew/opencode-drewgent/tree/main/skills/brain/pass-zero-secret-store
Command: npx skills add https://github.com/humanerd-drew/opencode-drewgent --skill pass-zero-secret-store

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires pass-zero, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill allows for the secure storage and retrieval of credentials using pass-zero, an encrypted store that ensures sensitive information is protected.

Core Features & Use Cases

  • Encrypted Credential Storage: Securely store and manage credentials like tokens, passwords, and API keys.
  • Credential Retrieval: Retrieve credentials when needed for secure use in commands or API calls.
  • Credential Rotation: Handle credential rotation for services like GitHub, Notion, and Cloudflare.

Quick Start

Store a new GitHub token for your agent by running: pass-zero set github token "your_token_here"

Frequently Asked Questions about pass-zero-secret-store

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely store API keys for services like GitHub and Cloudflare?

To securely store API keys, you can use an encrypted secret store like pass-zero to save credentials without exposing them in memory or logs. This ensures sensitive tokens are protected during storage and retrieval.

What is credential rotation and how does pass-zero handle it?

Credential rotation is the process of updating tokens and passwords to maintain security. pass-zero handles credential rotation by managing the update and replacement of tokens for services like GitHub, Notion, and Cloudflare.

Does pass-zero work for managing credentials across multiple platforms like Notion and GitHub?

Yes, pass-zero works for managing credentials across multiple platforms. It handles secure storage, retrieval, and rotation for service tokens from Notion, GitHub, and Cloudflare without exposing sensitive data in logs.

What's the best way to retrieve stored credentials for automated API calls?

The best way to retrieve stored credentials for automated API calls is using an encrypted secret store like pass-zero. It provides secure retrieval of tokens on demand while ensuring the sensitive information is not exposed in memory.

Do I need pass-zero installed to use this credential management skill?

Yes, you need pass-zero installed as a dependency. This skill relies on the pass-zero encrypted store to handle credential storage, retrieval, and rotation for your API keys and tokens.

How do I add a new GitHub token to my encrypted credential store?

To add a new GitHub token to your encrypted credential store, run the command `pass-zero set github token "your_token_here"`. This securely stores your API key for later retrieval and rotation.