git:20260708.e42b71f to git:20260911.3a0a7c8

---

name: "secrets-help"

description: "Secrets Commands - Overview of all secrets management commands."

---

<!-- GENERATED by claude-power-pack - scripts/codex-skill-sync.py; edit .claude/commands/secrets/help.md instead -->

# Secrets Commands

Overview of all secrets management commands.

## Instructions

Display the following help information:

```

Secrets Management Commands

/secrets-get [ID] Get credentials (masked output)

/secrets-set KEY VALUE Set or update a secret value

/secrets-delete KEY Delete a secret key (with confirmation)

/secrets-list List all secret keys (values masked)

/secrets-run -- CMD Run command with secrets injected as env vars

/secrets-validate Validate credential configuration

/secrets-ui Launch web UI for secrets management

/secrets-rotate KEY Rotate a secret value

/secrets-help This help message

Tiered Architecture:

Tier 0: .env in global config (~/.config/claude-power-pack/secrets/)

Tier 1: Encrypted local store (optional, requires cryptography)

Tier 2: AWS Secrets Manager (requires boto3 + AWS credentials)

CLI Usage:

Configuration:

Project-level: .claude/secrets.yml

Audit log: ~/.config/claude-power-pack/audit.log

Secret store: ~/.config/claude-power-pack/secrets/{project_id}/.env

```