secrets-help git:20260911.3a0a7c8A

Immutable. This exact content is served forever at /api/v1/blob/4c9a1b299edb612a.

---
name: "secrets-help"
description: "Secrets Commands - Overview of all secrets management commands."
---
<!-- GENERATED by claude-power-pack - scripts/codex-skill-sync.py; edit .claude/commands/secrets/help.md instead -->

# Secrets Commands

Overview of all secrets management commands.

## Instructions

Display the following help information:

```
Secrets Management Commands

  /secrets-get [ID]        Get credentials (masked output)
  /secrets-set KEY VALUE   Set or update a secret value
  /secrets-delete KEY      Delete a secret key (with confirmation)
  /secrets-list            List all secret keys (values masked)
  /secrets-run -- CMD      Run command with secrets injected as env vars
  /secrets-validate        Validate credential configuration
  /secrets-ui              Launch web UI for secrets management
  /secrets-rotate KEY      Rotate a secret value
  /secrets-help            This help message

Tiered Architecture:
  Tier 0: .env in global config (~/.config/claude-power-pack/secrets/)
  Tier 1: Encrypted local store (optional, requires cryptography)
  Tier 2: AWS Secrets Manager (requires boto3 + AWS credentials)

CLI Usage:
  PYTHONPATH="$HOME/Projects/claude-power-pack:$PYTHONPATH"
  uv run --project "$HOME/Projects/claude-power-pack" python -m lib.creds <command> [options]

Configuration:
  Project-level: .claude/secrets.yml
  Audit log:     ~/.config/claude-power-pack/audit.log
  Secret store:  ~/.config/claude-power-pack/secrets/{project_id}/.env
```