Use secrets without putting plaintext in the agent's context.
What it does
Keeps plaintext secrets out of the agent's context by passing runtime-resolved secret references to commands.
When to use it
Use when handling secrets, credentials, API keys, tokens, or passwords with shell or AWS API access.
How to use it
It changes how the agent handles secrets by prohibiting direct plaintext retrieval and requiring runtime-resolved references.
What you provide
- An existing project
Uses
Latest review
What you need · 6
The bundled wrapper runs with Python 3.
Requires access to secrets through either the local Secrets Manager Agent or the signed MCP endpoint, with secretsmanager:GetSecretValue permission.
Access · 3
This skill
AWS Secrets Manager
Read
Retrieves secrets at runtime
https://aws-mcp.us-east-1.api.aws/mcp
Write
Sends secret identifiers to AWS