stash-secrets

Manage end-to-end encrypted secrets with environment isolation via SDK and CLI.

156|6|Updated Nov 14, 2024
One-click install
npx skills add https://github.com/cipherstash/stack --skill stash-secrets
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: stash-secrets
Source: https://github.com/cipherstash/stack/tree/main/skills/stash-secrets
Command: npx skills add https://github.com/cipherstash/stack --skill stash-secrets

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides a secure and efficient way to manage sensitive credentials and configuration values, ensuring they are encrypted end-to-end and never exposed in plaintext.

Core Features & Use Cases

  • End-to-End Encryption: Secrets are encrypted locally before transmission, and decrypted locally after retrieval.
  • Environment Isolation: Manage separate sets of secrets for different environments (e.g., production, staging, development).
  • SDK and CLI Access: Interact with secrets management via a TypeScript SDK or a command-line interface.
  • Use Case: Securely store and retrieve database connection strings, API keys, and other sensitive information needed by your applications.

Quick Start

Use the stash-secrets skill to set the secret named DATABASE_URL with the value 'postgres://user:pass@host:5432/db' for the production environment.

Frequently Asked Questions about stash-secrets

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely manage API keys and credentials in a TypeScript application?

This Skill manages end-to-end encrypted secrets using the @cipherstash/stack library, supporting local encryption and decryption. It ensures sensitive credentials like API keys are never exposed in plaintext during application development and deployment workflows.

What is the best way to isolate secrets for different environments like production and staging?

Environment isolation lets you manage separate sets of encrypted secrets for different environments like production, staging, and development. This Skill facilitates secure storage and retrieval of sensitive credentials tailored to each specific environment.

Can I set and retrieve encrypted secrets via the command line?

Yes, you can interact with encrypted secrets via the command line. This Skill provides CLI access to securely store, retrieve, list, and delete sensitive configuration values like database connection strings directly from your terminal.

Does end-to-end encryption for secrets management work without exposing plaintext?

Yes, end-to-end encryption ensures secrets are encrypted locally before transmission and decrypted locally after retrieval. This mechanism guarantees sensitive information is never exposed in plaintext during storage or retrieval operations.

How do I store a database connection string securely for my deployment workflow?

You can store a database connection string securely by using the SDK or CLI to set the secret for a specific environment. The Skill encrypts the connection string locally before secure storage, integrating seamlessly into deployment workflows.