Secure secrets for agents
Skill sarveshsea/design-skills/skills/secure-secrets-for-agents
Handle agent credentials with env refs, redaction, least privilege, and non-leaking prompts.From its SKILL.md
npx -y skills add sarveshsea/design-skills --skill secure-secrets-for-agentsAssembled from the repository path, not quoted from the project. Check it against their README if it does not work.
One thing to look at
- 6 stars6 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.
SKILL.md
1.0 KB, 194 tokens by cl100k_base, as published. Nobody here has run it
Secure Secrets for Agents
Handle agent credentials with env refs, redaction, least privilege, and non-leaking prompts.
When to Use
Use this Note when a Memoire or Studio run needs agent secret, env key, credential setup, redaction, api key handling.
Workflow
- Store secret references, not secret values, in Notes, prompts, configs, logs, and screenshots.
- Separate setup commands from verification commands so auth checks can run without exposing keys.
- Scope keys by provider, workspace, and purpose when the platform supports it.
- Redact command output before handing it to another agent or saving it in memory.
- Rotate or revoke credentials immediately if a secret appears in terminal, browser, screenshot, or artifact output.
Sources
What ships with it: 1 file
894 B alongside SKILL.md
- note.json894 B