secrets-help · git:20260708.e42b71f · 2026-07-08 · sha256 3ee5ba57a2f28528
secrets-help git:20260708.e42b71fA
Immutable. This exact content is served forever at /api/v1/blob/3ee5ba57a2f28528.
---
name: "secrets-help"
description: "Secrets Commands - Overview of all secrets management commands."
---
<!-- GENERATED by claude-power-pack - scripts/codex-skill-sync.py; edit .claude/commands/secrets/help.md instead -->
# Secrets Commands
Overview of all secrets management commands.
## Instructions
Display the following help information:
```
Secrets Management Commands
/secrets-get [ID] Get credentials (masked output)
/secrets-set KEY VALUE Set or update a secret value
/secrets-delete KEY Delete a secret key (with confirmation)
/secrets-list List all secret keys (values masked)
/secrets-run -- CMD Run command with secrets injected as env vars
/secrets-validate Validate credential configuration
/secrets-ui Launch web UI for secrets management
/secrets-rotate KEY Rotate a secret value
/secrets-help This help message
Tiered Architecture:
Tier 0: .env in global config (~/.config/claude-power-pack/secrets/)
Tier 1: Encrypted local store (optional, requires cryptography)
Tier 2: AWS Secrets Manager (requires boto3 + AWS credentials)
CLI Usage:
PYTHONPATH="$HOME/Projects/claude-power-pack/lib:$PYTHONPATH"
python3 -m lib.creds <command> [options]
Configuration:
Project-level: .claude/secrets.yml
Audit log: ~/.config/claude-power-pack/audit.log
Secret store: ~/.config/claude-power-pack/secrets/{project_id}/.env
```