All open source

AI Agents /

Secret Injector

Agent skill for handing over or rotating a secret (API key, password, token) on a server without the value ever passing through the agent, the chat, logs, argv or shell history.

Source on GitHub
$npx skills add bnap00/secret-injector

You type the value into a one-shot web form on your own machine or network. A small sink script checks it with the real provider, writes it to the env file, restarts the service, verifies the running service uses it, and rolls back if anything fails. The agent only ever sees status lines.

The form is reachable locally, over the LAN, or across a tailnet with per-request Tailscale identity checks. The link dies after one success, five failures or 30 minutes. Values reach the sink on stdin, never argv or environment, and anything the sink prints is redacted against the submitted values.