Pilot keychain

Skill TeoSlayer/pilot-skills/skills/pilot-keychain

80+ agent skills for Pilot Protocol — communication, file transfer, trust, task routing, swarm coordination, and more

Install

npx -y skills add TeoSlayer/pilot-skills --skill pilot-keychain

Assembled from the repository path, not quoted from the project. Check it against their README if it does not work.

One thing to look at

7 stars7 stars. Stars are a popularity signal and not a quality one, but at this level it is likely that nobody has read this closely except its author, and you would be relying on your own review.

What its author says it does

Copied from the file, not written here

Secure credential exchange with auto-expiry for Pilot Protocol agents. Use this skill when: 1. You need to share API keys, tokens, or credentials securely between agents 2. You want automatic expiration and rotation of shared secrets 3. You need end-to-end encrypted credential distribution Do NOT use this skill when: - You need persistent credential storage (use secure vault instead) - You're sharing large files (use pilot-send for file transfer) - You need multi-recipient broadcast (use separate sends per recipient)

The file declares its own license as AGPL-3.0. That is the author’s claim about this one file, and it is not the same thing as the license GitHub reports for the repository, which is listed with the other numbers below.

SKILL.md

2.4 KB, as published. Nobody here has run it

Pilot Keychain

Secure credential exchange for Pilot Protocol with automatic expiration and encryption.

Commands

Send Credential

RECIPIENT="agent.pilot"
CRED_VALUE="sk-1234567890"
EXPIRES_AT=$(date -u -d '+1 hour' +%Y-%m-%dT%H:%M:%SZ)

cat > /tmp/cred.json <<EOF
{"credential_id":"$(openssl rand -hex 8)","value":"$CRED_VALUE","expires_at":"$EXPIRES_AT"}
EOF

pilotctl --json send-file "$RECIPIENT" /tmp/cred.json
rm /tmp/cred.json

Receive Credential

pilotctl --json received | jq -r '.received[] | select(.filename | test("cred-.*\\.json")) | .filepath' | \
  xargs -I {} cat {} | jq -r 'select(.expires_at > (now | todate)) | .value'

Cleanup Expired

for CRED_FILE in ~/.pilot/keychain/received/cred-*.json; do
  EXPIRES_AT=$(jq -r '.expires_at' "$CRED_FILE")
  [ $(date +%s) -gt $(date -d "$EXPIRES_AT" +%s) ] && rm "$CRED_FILE"
done

Workflow Example

#!/bin/bash
# Credential lifecycle

mkdir -p ~/.pilot/keychain/{sent,received}

send_credential() {
  local recipient="$1"
  local value="$2"
  local cred_id=$(openssl rand -hex 8)

  cat > /tmp/cred-$cred_id.json <<EOF
{
  "credential_id": "$cred_id",
  "value": "$value",
  "expires_at": "$(date -u -d '+1 hour' +%Y-%m-%dT%H:%M:%SZ)"
}
EOF

  pilotctl --json send-file "$recipient" /tmp/cred-$cred_id.json
  mv /tmp/cred-$cred_id.json ~/.pilot/keychain/sent/
}

send_credential "agent.pilot" "sk-secret-key"

Dependencies

Requires pilot-protocol, pilotctl, jq, and openssl.