swamp-vault

Store, retrieve, and list secrets across local encryption, AWS Secrets Manager, Azure Key Vault, and 1Password.

530|41|Updated Jan 28, 2026
One-click install
npx skills add https://github.com/systeminit/swamp --skill swamp-vault
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: swamp-vault
Source: https://github.com/systeminit/swamp/tree/main/.claude/skills/swamp-vault
Command: npx skills add https://github.com/systeminit/swamp --skill swamp-vault

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill provides a robust and secure way to manage sensitive information like API keys, passwords, and credentials, ensuring they are not exposed in code or logs.

Core Features & Use Cases

  • Secure Storage: Store secrets in various backends (local encryption, AWS Secrets Manager, Azure Key Vault, 1Password).
  • Vault Expressions: Seamlessly reference secrets within model definitions and workflows using CEL expressions.
  • Use Case: When deploying an application, use this Skill to retrieve database credentials from a production vault and inject them securely into the application's configuration without ever exposing the plaintext password.

Quick Start

Use the swamp-vault skill to store the secret 'MY_API_KEY' with the value 'supersecret123' in the 'dev-secrets' vault.

Frequently Asked Questions about swamp-vault

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely manage API keys and credentials for AI agents?

Securely manage API keys and credentials for AI agents by storing them in encrypted vaults. This prevents sensitive information from being exposed in code or logs during application deployment.

What's the best way to reference secrets dynamically in model definitions and workflows?

Reference secrets dynamically in model definitions and workflows using CEL vault expressions. This allows seamless secret retrieval from configured backends without exposing plaintext values.

Does swamp-vault support AWS Secrets Manager and Azure Key Vault for storing credentials?

Yes, storing credentials is supported across multiple backends including AWS Secrets Manager, Azure Key Vault, 1Password, and local encryption. This enables flexible secret management across different cloud environments.

How do I store and retrieve secrets using local encryption?

Store and retrieve secrets using local encryption by creating a vault and adding secret entries. Retrieve stored values dynamically during execution to inject credentials securely into application configurations.

Can I automatically store sensitive fields generated in model outputs?

Yes, sensitive fields generated in model outputs can be automatically stored in configured vaults. This ensures that secrets created during workflow execution are captured securely without plaintext exposure.

When do I need a secrets management vault for my AI workflows?

A secrets management vault is needed when AI workflows require database credentials, API keys, or passwords. It ensures sensitive data is injected securely into configurations without hardcoding values into source code.