api-key-vault

分类: 测试与安全 | 上传者: matbanik | 下载: 0 | 版本: v1.0（最新）

Securely manage API keys using machine-bound encryption. Use when the user mentions API keys, credentials, encryption, secrets management, or needs to store/retrieve sensitive configuration.

更新日志: Source: GitHub https://github.com/matbanik/ai-project-template

目录结构

当前层级: .agent/skills/api-key-vault/

📄 SKILL.md 1.1 KB

SKILL.md

---
name: api-key-vault
description: Securely manage API keys using machine-bound encryption. Use when the user mentions API keys, credentials, encryption, secrets management, or needs to store/retrieve sensitive configuration.
---

# API Key Vault

## Quick Usage

```bash
# Encrypt keys
python tools/key_vault.py encrypt

# Decrypt keys
python tools/key_vault.py decrypt

# List stored keys
python tools/key_vault.py list
```

## How It Works

1. Uses machine-specific key derivation (PBKDF2 + Fernet)
2. Keys are encrypted at rest in `api-keys.local.json`
3. Machine-bound: encrypted keys only work on the same machine

## Key File Pattern

```json
// api-keys.sample.json (safe to commit)
{
  "TAVILY_API_KEY": "",
  "BRAVE_API_KEY": "",
  "GOOGLE_API_KEY": "",
  "GOOGLE_CSE_ID": ""
}

// api-keys.local.json (gitignored, contains real keys)
```

## Security Rules

1. **Never commit** `api-keys.local.json`
2. **Ensure gitignore** includes: `api-keys.local.json`, `*.pickle`, `*_secrets.json`
3. **Rotate immediately** if keys are accidentally committed
4. Pomera's `auto_encrypt` flag detects sensitive data automatically

登录后下载/点赞/收藏 ❤ 2 | ★ 0

api-key-vault

目录结构

SKILL.md

举报内容

提示