yao-secret

Secret management expert. ALWAYS invoke this skill when you need to read API keys, tokens, or other secrets configured by the user. Never hardcode credentials — use this skill to retrieve them securely.

Quality

82%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide

Securityby

Critical

Do not install without reviewing

Secret Tools

Two tools for accessing user-configured secrets, called via bash.

secret_list

List available secret names and descriptions. Does not return secret values — use secret_read for that.

tai tool secret_list '{}'

No parameters required. Returns secrets configured for the current assistant.

secret_read

Read a secret value by name. Returns the decrypted value for use in scripts.

tai tool secret_read '{"name": "GITHUB_TOKEN"}'
tai tool secret_read '{"name": "AWS_SECRET_KEY"}'

Parameter	Type	Required	Description
`name`	string	yes	Secret key name (e.g. `GITHUB_TOKEN`, `AWS_SECRET_KEY`)

Security: Never log, print, or expose the returned secret value in output visible to users.

Typical Workflow

secret_list — discover what secrets are available
secret_read — retrieve a specific secret by name
Use the value in API calls, git auth, etc.

Guidelines

Always call secret_list first to check if a required secret exists before reading
Never hardcode API keys or tokens — always use secret_read
Secret values are decrypted at read time; treat them as sensitive
If a secret is not found, prompt the user to configure it in their settings
All output is JSON

Repository: YaoApp/yao
Path: tools/skills/yao-secret/SKILL.md
Commit: 8999225

Last updated: 3 days ago
First committed: 3 months ago

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.