skills.rest
metric-space-ai
metric-space-aiOFFICIAL
Explore all skills by this author →
WebsiteGitHub

secret-management

Classify, generate, and persist credentials in an encrypted local secret store.

2|Updated Apr 12, 2026
Search Tags:#sqlite#encryption#credentials#secret-management#secret-store#ctox
One-click install
npx skills add https://github.com/metric-space-ai/ctox --skill secret-management-metric-space-ai
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secret-management
Source: https://github.com/metric-space-ai/ctox/tree/main/skills/system/security_access/secret-management
Command: npx skills add https://github.com/metric-space-ai/ctox --skill secret-management-metric-space-ai

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

Classify, generate, reference, and persist service credentials as durable, locally encrypted secret material with accompanying metadata to guide usage and access decisions.

Core Features & Use Cases

  • Classification: decide whether a credential is generated, discovered, owner_supplied, or external_reference.
  • Durable storage: store secret metadata alongside the secret in an encrypted SQLite-backed store.
  • Workflow integration: expose CLI commands (ctox secret put, secret intake, list/show/get) to manage secrets within CTOX workflows.

Quick Start

Store a local admin secret in the encrypted secret store using the ctox CLI.

Frequently Asked Questions about secret-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I store service credentials securely in a local encrypted database?▼

Store service credentials securely in a local encrypted SQLite-backed secret store using CLI commands to persist secret material alongside durable metadata like kind, status, and bindings.

What is the best way to manage secret intake for deployment workflows?▼

Manage secret intake for deployment workflows by classifying credentials as generated, discovered, owner_supplied, or external_reference, then persisting them with metadata to guide access decisions.

Can I retrieve stored credentials using a secret handle from an encrypted store?▼

Retrieve stored credentials from the encrypted store using a returned secret handle, which provides durable access to the persisted secret material and its accompanying usage metadata.

Does the encrypted secret store prevent leaking credentials during local operations?▼

The encrypted secret store enforces guardrails to prevent leaking credentials during local operations, ensuring all secret material remains protected within the SQLite-backed database.

What metadata fields are stored alongside credentials in a local secret store?▼

Metadata fields stored alongside credentials in the local secret store include kind, status, reply_path, and bindings, which guide usage and access decisions across services and deployments.

Related Skills

Explore More Software Engineering Skills→
metric-space-aimetric-space-ai
2

secret-hygiene

Store raw secrets in the encrypted SQLite-backed CTOX secret store and replace literals with stable references.

Official
Intermediate
Arry8Arry8
1

1password

Automate secure secret management with the 1Password CLI.

Community
Intermediate
metric-space-aimetric-space-ai
2

ticket-access-and-secrets

Manage credentials and access rights for ticket work in CTOX.

Official
Advanced
elasticdotventureselasticdotventures
14

direnv-pattern

Automate loading of per-project environment variables via direnv and dotenv with Rust validation.

Community
Advanced