@k2wanko/secrets-cli
v0.1.2
Published
CLI for managing secrets in OS-native credential storage. Includes Agent Skill for AI coding assistants.
Maintainers
Readme
@k2wanko/secrets-cli
CLI for managing secrets in OS-native credential storage. Designed for AI agents and developers to safely handle sensitive credentials like API keys, tokens, and passwords.
Includes an Agent Skill for automatic integration with AI coding assistants.
Features
- OS-native credential storage - macOS Keychain, Linux libsecret, Windows Credential Manager
- Single binary - no runtime dependencies required
- Simple commands -
get,set,delete - JSON output -
--jsonflag for programmatic integration - Secure input - stdin piping to avoid shell history exposure
- Agent Skill included - compatible with the agentskills.io open standard
Supported platforms
| Platform | Architecture | |----------|-------------| | macOS | ARM64, x64 | | Linux | x64, ARM64 | | Windows | x64 |
Install
npm install -g @k2wanko/secrets-cliAgent Skill
This package ships an Agent Skill at skills/secrets/SKILL.md that enables AI coding assistants to manage credentials automatically.
Supported agents
Compatible with any agent that supports the agentskills.io standard, including:
Claude Code, Cursor, Codex, Gemini CLI, VS Code Copilot, Windsurf, Goose, and more.
Skill installation
# Using the skills CLI
npx skills add k2wanko/secrets-cli --skill secrets -a claude-code
# Or copy manually to your personal skills directory
cp -r skills/secrets ~/.claude/skills/secretsUsage
# Store a secret (via stdin, recommended)
echo "sk-proj-xxxxx" | secrets set --service openai --name api-key
# Store a secret (via flag)
secrets set --service openai --name api-key --value "sk-proj-xxxxx"
# Retrieve a secret
secrets get --service openai --name api-key
# Retrieve as JSON
secrets get --service openai --name api-key --json
# Delete a secret
secrets delete --service openai --name api-keyOptions
| Flag | Short | Description |
|------|-------|-------------|
| --service | -s | Service/application name |
| --name | -n | Account/key name |
| --value | -v | Secret value (set only) |
| --json | | Output in JSON format |
| --help | -h | Show help |
Exit codes
| Code | Meaning | |------|---------| | 0 | Success | | 1 | Invalid arguments | | 2 | Secret not found | | 3 | Operation failed | | 4 | Unexpected error |
Development
bun install
bun run lint
bun test
# Build binaries for all platforms
bun run buildLicense
MIT
