keepassxc-secrets

仓库创建 2026年7月26日最近提交 3 天前SkillHot 收录 2 天前

这个 Skill 做什么

当某条命令需要本地 KeePassXC 里的密码、token 或 API key 时，用它把秘密安全注入到命令环境里而不打印出来。适合脚本或工具要凭据但又不能在日志/终端泄露的时候。特色是支持 kp:// 引用和 kpsec run/check/ls/add，主库密码由系统 keyring 管理，通常不会弹窗打扰。

▸ 展开 SKILL.md 英文原文

Use when a command needs a password, token or API key that lives in a local KeePassXC database — resolve it into the command's environment without ever printing the value. Covers kp:// secret references and kpsec run/check/ls/add.

Stars

Forks

仓库内 Skill

7 日增星

安装 / 使用

给你的 Agent 一句话（通用）

帮我安装这个 skill：https://raw.githubusercontent.com/jidckii/agents-keepassxc-skill/main/skills/keepassxc-secrets/SKILL.md

或 curl 直取 SKILL.md

curl -fsSL "https://raw.githubusercontent.com/jidckii/agents-keepassxc-skill/main/skills/keepassxc-secrets/SKILL.md"

SKILL.MD 节选查看完整文件 ↗

# keepassxc-secrets — secrets from KeePassXC without leaking them

Agent-facing secrets live in a **separate database**, by default `~/.pass/agents.kdbx`.
Its master password is stored in the system keyring (Secret Service on Linux,
Keychain on macOS, Credential Manager on Windows) and, on Linux, cached in the
kernel keyring, so the commands run without prompting. The user's main database
stays out of reach — that is what bounds the blast radius.

`kpsec` is a shell script (`kpsec.ps1` on Windows). No runtime beyond the shell.

## The one rule

**Never print a secret and never call `keepassxc-cli` directly.** Its output goes
straight into the transcript. `kpsec` resolves values inside its ow

via SKILL·HOT · 数据来自 GitHub 公开信息 · 原文版权归作者所有