api-key-vault

Category: Testing & Security | Uploader: matbanik | Downloads: 0 | Version: v1.0（Latest）

Securely manage API keys using machine-bound encryption. Use when the user mentions API keys, credentials, encryption, secrets management, or needs to store/retrieve sensitive configuration.

Changelog: Source: GitHub https://github.com/matbanik/ai-project-template

Directory Structure

Current level: .agent/skills/api-key-vault/

📄 SKILL.md 1.1 KB

SKILL.md

---
name: api-key-vault
description: Securely manage API keys using machine-bound encryption. Use when the user mentions API keys, credentials, encryption, secrets management, or needs to store/retrieve sensitive configuration.
---

# API Key Vault

## Quick Usage

```bash
# Encrypt keys
python tools/key_vault.py encrypt

# Decrypt keys
python tools/key_vault.py decrypt

# List stored keys
python tools/key_vault.py list
```

## How It Works

1. Uses machine-specific key derivation (PBKDF2 + Fernet)
2. Keys are encrypted at rest in `api-keys.local.json`
3. Machine-bound: encrypted keys only work on the same machine

## Key File Pattern

```json
// api-keys.sample.json (safe to commit)
{
  "TAVILY_API_KEY": "",
  "BRAVE_API_KEY": "",
  "GOOGLE_API_KEY": "",
  "GOOGLE_CSE_ID": ""
}

// api-keys.local.json (gitignored, contains real keys)
```

## Security Rules

1. **Never commit** `api-keys.local.json`
2. **Ensure gitignore** includes: `api-keys.local.json`, `*.pickle`, `*_secrets.json`
3. **Rotate immediately** if keys are accidentally committed
4. Pomera's `auto_encrypt` flag detects sensitive data automatically

Comments 0

Latest | Hot

Please login before commenting.

No comments yet. Be the first one!

api-key-vault

Directory Structure

SKILL.md

Report

Notice