secure-vault

Manages XOR-encrypted secrets stored locally with key-file protection.

1|Updated Feb 25, 2026
One-click install
npx skills add https://github.com/winsorllc/upgraded-carnival --skill secure-vault
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secure-vault
Source: https://github.com/winsorllc/upgraded-carnival/tree/main/.pi/skills/secure-vault
Command: npx skills add https://github.com/winsorllc/upgraded-carnival --skill secure-vault

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill provides a secure, local solution for storing sensitive information like API keys and credentials, protecting them from unauthorized access.

Core Features & Use Cases

  • Encrypted Storage: Secrets are encrypted using AES-256-GCM before being stored locally.
  • Local Key Management: The encryption key is stored separately and protected with strict file permissions (0600), ensuring it never leaves the local system.
  • Use Case: Securely store your GitHub Personal Access Token or AWS Access Key ID without risking exposure in your codebase or configuration files.

Quick Start

Use the secure-vault skill to set a secret named 'my_api_key' with the value 'super_secret_value'.

Frequently Asked Questions about secure-vault

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely store API keys and credentials locally outside my codebase?

You can securely store API keys and credentials locally by encrypting them with a local key file. The system uses AES-256-GCM encryption and strict file permissions (0600) to ensure sensitive data never leaves your local system unprotected.

How does local key management work for encrypted secrets storage?

Local key management works by generating and storing an encryption key separately from your secrets on the local system. The key file is protected with strict file permissions (0600) to prevent unauthorized access.

Can I export and import secrets when managing encrypted credentials?

Yes, you can export and import secrets when managing encrypted credentials. The storage system includes built-in handlers for setting, retrieving, listing, deleting, exporting, and importing your encrypted data.

What is the best way to manage GitHub tokens and AWS access keys locally?

The best way to manage GitHub tokens and AWS access keys locally is using encrypted storage with separate key management. This approach keeps credentials out of your codebase and configuration files while maintaining local-only access.

Does secure-vault work without external dependencies or cloud services?

Yes, secure-vault works without external dependencies or cloud services. It operates entirely locally, storing the encryption key and secrets on your local system with strict file permissions for enhanced data protection.

What encryption method is used for local secrets storage?

The local secrets storage uses AES-256-GCM encryption with a local key file. The encryption key is stored separately and protected with strict file permissions (0600) to ensure your data remains secure.