secrets-run git:20260911.3a0a7c8A

Immutable. This exact content is served forever at /api/v1/blob/843afef7b66539fd.

---
name: "secrets-run"
description: "Run with Secrets - Execute a command with project secrets injected as environment variables. Secrets never appear in CLI arguments, logs, or output."
---
<!-- GENERATED by claude-power-pack - scripts/codex-skill-sync.py; edit .claude/commands/secrets/run.md instead -->

# Run with Secrets

Execute a command with project secrets injected as environment variables.
Secrets never appear in CLI arguments, logs, or output.

## Arguments

- `COMMAND` (required): The command to run (after --)

## Instructions

When the user invokes `/secrets-run -- COMMAND`, run:

```bash
PYTHONPATH="${HOME}/Projects/claude-power-pack:${PYTHONPATH}" uv run --project "${HOME}/Projects/claude-power-pack" python -m lib.creds run -- $COMMAND
```

With provider override:
```bash
PYTHONPATH="${HOME}/Projects/claude-power-pack:${PYTHONPATH}" uv run --project "${HOME}/Projects/claude-power-pack" python -m lib.creds run --provider aws -- $COMMAND
```

**IMPORTANT:**
- Never display secret values in output
- Secrets are injected as environment variables in the subprocess only
- The parent process environment is not modified

Report the command exit code.