Store and retrieve secrets in an AES-256-GCM encrypted vault.
npx skills add https://github.com/jholhewres/devclaw --skill vault-jholhewres
Please help me install this Agent Skill. Skill: vault Source: https://github.com/jholhewres/devclaw/tree/main/pkg/devclaw/copilot/builtin/skills/vault Command: npx skills add https://github.com/jholhewres/devclaw --skill vault-jholhewres
Securely manage sensitive credentials so they are not exposed in memory, logs, or casual storage and to prevent accidental data loss from unsafe overwrite or delete operations.
Store a new OpenAI API key by issuing vault(action="save", name="OPENAI_API_KEY", value="sk-proj-xxxxx").
High-intent search queries and answers about installing and using this skill.
Use an encrypted vault to securely store API keys and tokens by issuing a name-based save action. The vault applies AES-256-GCM encryption to protect credentials at rest, preventing exposure in memory or logs during automated deployments or integrations.
The best way to manage secrets for authenticated API calls is using an encrypted vault with name-based save, get, and list actions. Agents retrieve credentials on demand, while overwrite-on-save behavior and explicit-delete safeguards prevent accidental data loss.
AES-256-GCM encryption protects credentials at rest by encrypting stored secrets so they remain unreadable without the decryption key. This mechanism secures sensitive data like database URLs and passwords against unauthorized access or casual storage exposure.
Yes, you can overwrite an existing secret by issuing a save action with the same name, which replaces the stored value. However, deleting a secret requires an explicit delete action to provide safeguards against accidental data loss from unsafe flows.
Retrieve stored database URLs by issuing a get action with the specific secret name. This fetches the encrypted credential from the vault, allowing applications or CI/CD pipelines to use the database URL for provisioning infrastructure.
Storing secrets in memory risks exposure through logs or unauthorized access, so the vault discourages this practice. The vault prevents accidental destructive flows by requiring explicit delete actions, but it does not manage runtime memory isolation.
JingyueCongCreate email accounts and send messages through the AgentMail API.
JOHNNYWHITEMIKEPerform authenticated X API actions via a curl-like CLI.
olehsvyrydovAutomate cloud infrastructure provisioning with Terraform, Kubernetes, and CI/CD pipelines.
samdenglerEncrypt and manage secrets locally with an OS keychain master key.
