secrets

82 / 100 · Low risk

Fine to try. Some of what it can do is expected: a coding skill usually runs build and test commands.

By phnx-labs/agi-cli (GitHub) · coding · 26 stars · scanned at commit 4e24842

Manage named bundles of environment variables backed by the OS keychain (macOS Keychain, Linux libsecret, Windows Credential Manager). Create bundles, add secrets, generate passwords, and inject them into agent runs. Triggers on: 'API key', 'credentials', 'secrets bundle', 'inject env vars', '--secrets', 'keychain', 'credential manager'.

Works with any agent that supports SKILL.md skills.

What this skill can do

Runs commands on your computer

This is disclosed by the author in the skill's SKILL.md or README. Expected for a coding skill.

Found in 16 places.

skills/secrets/SKILL.md, line 16agents clis install secrets
skills/secrets/SKILL.md, line 44secrets create prod
skills/secrets/SKILL.md, line 66secrets create prod

Show 13 more

skills/secrets/SKILL.md, line 80echo "$NEW_API_KEY" | secrets add prod STRIPE_KEY --value-stdin
skills/secrets/SKILL.md, line 86secrets generate --copy # copies to clipboard, prints nothing
skills/secrets/SKILL.md, line 97secrets create work
skills/secrets/SKILL.md, line 114secrets add prod STRIPE_KEY --type api-key --expires 2027-12-31 --note "Live key, rotate annually"
skills/secrets/SKILL.md, line 124secrets create x.com --description "X/Twitter accounts. Read key notes to pick the right one."
skills/secrets/SKILL.md, line 142secrets view x.com # read notes, choose the account
skills/secrets/SKILL.md, line 149secrets import prod --from .env.prod
skills/secrets/SKILL.md, line 161secrets import --from icloud # interactive multi-select
skills/secrets/SKILL.md, line 171secrets add prod AWS_TOKEN --exec "aws sts get-session-token --query Credentials.SessionToken"
skills/secrets/SKILL.md, line 183secrets unlock prod # one Touch ID; held ~7 days (default)
skills/secrets/SKILL.md, line 214secrets policy prod # show the current policy
skills/secrets/SKILL.md, line 232secrets view stripe.com # usage summary + held state + per-agent
skills/secrets/SKILL.md, line 250secrets create stripe.com --description "Stripe live + test API keys"

Downloads and installs other software

The author does not mention this.

Found in 1 place.

skills/secrets/SKILL.md, line 32| Linux (desktop) | GNOME Keyring (libsecret) | `sudo apt install libsecret-tools` |

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'secrets' ] || [ -L ~/.agents/skills/'secrets' ]; then echo 'A skill folder named secrets already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/phnx-labs/agi-cli' "$d" && git -C "$d" checkout --quiet '4e24842145ecfd759dbdab8f02160e8b6d8ecbe9' -- 'skills/secrets' && mkdir -p ~/.agents/skills && cp -R "$d"/'skills/secrets' ~/.agents/skills/'secrets' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'secrets' ~/.claude/skills/'secrets' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for phnx-labs/agi-cli shows the score of its lowest-scoring skill.

SkillTrust badge for phnx-labs/agi-cli

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/phnx-labs/agi-cli.svg)](https://zalavijaysinh.github.io/skilltrust/repos/phnx-labs/agi-cli/)

Score history

Date	Version	Score
2026-11-07	`4e24842`	82