Use Avibe Vault for API keys, tokens, passwords, protected credentials, authenticated HTTP requests, or digest signing without exposing secret values to the agent.
$ npx skills add avibe-bot/avibe --skill use-avibe-vault -a claude-codeProject install by default; add -g for ~/.claude/skills/.
$ gh skill install avibe-bot/avibe use-avibe-vault --agent claude-codeProject scope by default; add --scope user for a personal install. Needs GitHub CLI 2.90.0 or later (public preview).
$ git clone --depth 1 https://github.com/avibe-bot/avibe.git skills-src && mkdir -p .claude/skills && cp -r skills-src/skills/use-avibe-vault .claude/skills/use-avibe-vault && rm -rf skills-srcUse ~/.claude/skills/ instead of .claude/skills for a personal install. The folder must contain SKILL.md.
Claude Code skills documentation · loads skills from .claude/skills/
Install the "use-avibe-vault" agent skill from https://github.com/avibe-bot/avibe/tree/master/skills/use-avibe-vault into .claude/skills/use-avibe-vault/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "use-avibe-vault", then confirm the skill loads.Claude Code copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$skill-installer install https://github.com/avibe-bot/avibe/tree/master/skills/use-avibe-vaultType this inside Codex. $skill-installer <name> installs a curated skill from openai/skills. The installer writes to $CODEX_HOME/skills (default ~/.codex/skills). Restart Codex if the skill does not show up.
$ npx skills add avibe-bot/avibe --skill use-avibe-vault -a codexProject install goes to .agents/skills/; add -g for ~/.codex/skills/.
$ gh skill install avibe-bot/avibe use-avibe-vault --agent codexProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/avibe-bot/avibe.git skills-src && mkdir -p .agents/skills && cp -r skills-src/skills/use-avibe-vault .agents/skills/use-avibe-vault && rm -rf skills-srcUse ~/.agents/skills/ instead of .agents/skills for a personal install.
Codex skills documentation · loads skills from .agents/skills/
Install the "use-avibe-vault" agent skill from https://github.com/avibe-bot/avibe/tree/master/skills/use-avibe-vault into .agents/skills/use-avibe-vault/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "use-avibe-vault", then confirm the skill loads.Codex copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add avibe-bot/avibe --skill use-avibe-vault -a cursorProject install goes to .agents/skills/; add -g for ~/.cursor/skills/.
$ gh skill install avibe-bot/avibe use-avibe-vault --agent cursorProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/avibe-bot/avibe.git skills-src && mkdir -p .cursor/skills && cp -r skills-src/skills/use-avibe-vault .cursor/skills/use-avibe-vault && rm -rf skills-srcUse ~/.cursor/skills/ instead of .cursor/skills for a personal install.
Cursor skills documentation · loads skills from .cursor/skills/, .agents/skills/, .claude/skills/, .codex/skills/
Install the "use-avibe-vault" agent skill from https://github.com/avibe-bot/avibe/tree/master/skills/use-avibe-vault into .cursor/skills/use-avibe-vault/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "use-avibe-vault", then confirm the skill loads.Cursor copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gemini skills install https://github.com/avibe-bot/avibe.git --path skills/use-avibe-vault--scope user (default) or --scope workspace; --path is the subfolder of the repo that holds the skill; --consent skips the security confirmation prompt.
$ npx skills add avibe-bot/avibe --skill use-avibe-vault -a gemini-cliProject install goes to .agents/skills/; add -g for ~/.gemini/skills/.
$ gh skill install avibe-bot/avibe use-avibe-vault --agent gemini-cliProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/avibe-bot/avibe.git skills-src && mkdir -p .gemini/skills && cp -r skills-src/skills/use-avibe-vault .gemini/skills/use-avibe-vault && rm -rf skills-srcUse ~/.gemini/skills/ instead of .gemini/skills for a personal install, then run /skills reload.
Gemini CLI skills documentation · loads skills from .gemini/skills/, .agents/skills/
Install the "use-avibe-vault" agent skill from https://github.com/avibe-bot/avibe/tree/master/skills/use-avibe-vault into .gemini/skills/use-avibe-vault/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "use-avibe-vault", then confirm the skill loads.Gemini CLI copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ gh skill install avibe-bot/avibe use-avibe-vaultInstalls for Copilot at project scope by default; add --scope user for a personal install. Preview a skill first with gh skill preview. Needs GitHub CLI 2.90.0 or later (public preview).
$ npx skills add avibe-bot/avibe --skill use-avibe-vault -a github-copilotProject install goes to .agents/skills/; add -g for ~/.copilot/skills/.
$ git clone --depth 1 https://github.com/avibe-bot/avibe.git skills-src && mkdir -p .github/skills && cp -r skills-src/skills/use-avibe-vault .github/skills/use-avibe-vault && rm -rf skills-srcUse ~/.copilot/skills/ instead of .github/skills for a personal install. Commit .github/skills so cloud agent and code review can use it.
GitHub Copilot skills documentation · loads skills from .github/skills/, .claude/skills/, .agents/skills/
Install the "use-avibe-vault" agent skill from https://github.com/avibe-bot/avibe/tree/master/skills/use-avibe-vault into .github/skills/use-avibe-vault/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "use-avibe-vault", then confirm the skill loads.GitHub Copilot copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
$ npx skills add avibe-bot/avibe --skill use-avibe-vault -a opencodeOpenCode documents no install command of its own. Project install goes to .agents/skills/; add -g for ~/.config/opencode/skills/.
$ gh skill install avibe-bot/avibe use-avibe-vault --agent opencodeProject scope by default (.agents/skills/); add --scope user for a personal install.
$ git clone --depth 1 https://github.com/avibe-bot/avibe.git skills-src && mkdir -p .opencode/skills && cp -r skills-src/skills/use-avibe-vault .opencode/skills/use-avibe-vault && rm -rf skills-srcUse ~/.config/opencode/skills/ instead of .opencode/skills for a personal install.
OpenCode skills documentation · loads skills from .opencode/skills/, .claude/skills/, .agents/skills/
Install the "use-avibe-vault" agent skill from https://github.com/avibe-bot/avibe/tree/master/skills/use-avibe-vault into .opencode/skills/use-avibe-vault/ in this project. Copy the whole folder (SKILL.md and every file beside it), keep the folder name "use-avibe-vault", then confirm the skill loads.OpenCode copies the folder itself, the same result as the manual copy. Check what it changed before you commit it.
use-avibe-vaultUse Avibe Vault for API keys, tokens, passwords, protected credentials, authenticated HTTP requests, or digest signing without exposing secret values to the agent.
Use Avibe Vault is an agent skill from avibe-bot/avibe. Use Avibe Vault for API keys, tokens, passwords, protected credentials, authenticated HTTP requests, or digest signing without exposing secret values to the agent.
Its SKILL.md is about 1.1k tokens, which your agent loads only when the skill is triggered. It is a single SKILL.md file with no bundled scripts.
The repository describes itself as: The local-first Agent OS — your AI partner lives on your own machine. Drive the official Claude Code, Codex & OpenCode from your browser or any chat app. The licence is MIT.
Read from SKILL.md and the folder at commit 61e315a. It shows what the files ask for, not the result of running them.
Pre-approves nothing: there is no allowed-tools line, so your agent's usual permission prompts apply.
From allowed-tools in the SKILL.md frontmatter.
No scripts in the folder and no shell commands in SKILL.md.
From the folder's file list and the shell code blocks in SKILL.md.
Hosts in commands or code, which the agent is likely to contact:
api.github.comFrom URLs in SKILL.md, links to its own repository left out.
Names these keys or tokens, usually read from environment variables:
OPENAI_API_KEYGITHUB_TOKENWALLET_KEYFrom names ending in _API_KEY, _TOKEN, _SECRET, _KEY or _PASSWORD in SKILL.md.
Use Avibe Vault loads about 1.1k tokens when it runs. Until then it costs about 45 tokens; SKILL.md has 594 words of instructions outside code blocks.
Estimates: characters ÷ 4, the usual rule of thumb; real counts depend on the model's tokenizer. Scripts and assets cost tokens only if the agent reads them.
The automated check found no risky patterns in SKILL.md.
Automated static check — not a guarantee. Review scripts before installing. It scans the text of SKILL.md for risky patterns (piping downloads into a shell, reading credential files, hidden Unicode, destructive commands); files beside SKILL.md are not scanned.
The full file from avibe-bot/avibe at commit 61e315a, republished under its MIT licence (© avibe-bot). 594 words, ~1,108 tokens.
.claude/skills/use-avibe-vault/SKILL.md (or your agent's skills folder).When a task needs API keys, access tokens, passwords, wallet private keys, or other sensitive credentials, prefer Avibe Vault: agents reference secrets by name, tag, or skill tag, and users do not need to paste plaintext into chat.
Core concepts:
vibe vault run for environment injection or vibe vault fetch for authenticated HTTP egress.run / fetch; use vibe vault sign.Rules:
run / fetch; keypair secrets can only be used with vibe vault sign.vibe vault run, the child process receives static secrets as environment variables, so never run commands that may print env vars, debug config, or secret-bearing errors.run / fetch needs approval, Avibe automatically asks the user to decrypt and authorize access. After the user approves, Avibe resumes this session; it does not replay the command for you, so run the same run / fetch command again.sign needs approval, Avibe creates a browser signing request and returns immediately. Do not rerun sign; when Avibe resumes this session, follow the callback instruction to read the completed request result and continue with the returned signature.Common commands:
Request that the user add a missing static secret. spec-json may contain only non-secret prefill metadata; the actual secret value is entered by the user in the browser:
vibe vault request OPENAI_API_KEY --reason "Need OpenAI API access" --spec-json '{"kind":"static","protection":"protected","description":"OpenAI API key","tags":["openai","prod","skill:model-work"],"policy":{"allowed_hosts":["api.openai.com"],"auth":{"type":"bearer"}}}'
For a missing keypair/signing key, ask the user to create a keypair secret in the Vault UI; do not request or store private-key material as a static secret.
On Avibe Web chat, a lighter manual prompt can mention the missing secret as a clickable placeholder in your reply, for example $<OPENAI_API_KEY>. The user can click it and fill the secret from Web chat. This has no reason or structured prefill metadata; use vibe vault request when those are needed.
List or find existing Vault entries:
vibe vault list
vibe vault list --tag prod
vibe vault find --kind static --protection protected
vibe vault find openai --tag prod
vibe vault tags
Run a command with selected static secrets injected as environment variables:
vibe vault run --env OPENAI_API_KEY,GITHUB_TOKEN -- python script.py
vibe vault run --env GITHUB_TOKEN=GH_PAT --env OPENAI_API_KEY -- python script.py
vibe vault run --tag deploy -- ./deploy.sh
vibe vault run --skill github-release -- ./release.sh
Make an authenticated HTTP request. The credential is attached only at egress, and the agent never sees the secret:
vibe vault fetch --auth GITHUB_PAT --url https://api.github.com/user
Request approval before a protected run with an existing static secret:
vibe vault access PROD_DB_URL --skill deploy --command "run database migration" --egress "connect to production database"
For protected fetch, run vibe vault fetch; it creates the correct fetch approval request when needed.
Sign a 32-byte digest with a keypair secret. Standard keys may return the signature directly; protected keys create a browser approval request:
vibe vault sign WALLET_KEY --digest <64-hex-digest> --scheme ecdsa-secp256k1-recoverable --command "sign deployment transaction"
For more details, run vibe vault --help.
© avibe-bot, MIT. Rendered from Markdown: HTML in the file is shown as text, images as links, and headings moved down two levels. Raw file
Just SKILL.md in skills/use-avibe-vault of avibe-bot/avibe.
Open the folder on GitHubat commit 61e315a
Use Avibe Vault next to the 5 skills that share the most tags, products or categories with it. Stars are the repository's; “used in” counts other GitHub owners with a copy.
| Skill | Stars | Used in | Tokens | Auto-check | Licence | Repo updated |
|---|---|---|---|---|---|---|
| Use Avibe Vault this skillavibe-bot/avibe | 624 | — | ~1.1k | Automated safety check: Pass | MIT | |
| Abusing Dpapi For Credential Accessmukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.7k | Automated safety check: Warn | Apache-2.0 | |
| Azure Key VaultMicrosoftDocs/Agent-Skills | 776 | — | ~4.9k | Automated safety check: Pass | CC-BY-4.0 | |
| Protect With Passwordtransilienceai/communitytools | 563 | — | ~583 | Automated safety check: Pass | MIT | |
| Performing Credential Access With Lazagnemukul975/Anthropic-Cybersecurity-Skills | 34k | — | ~2.2k | Automated safety check: Warn | Apache-2.0 | |
| Obsidian Vault Maintaineropenclaw/openclaw | 392k | 1 repos | ~262 | Automated safety check: Pass | MIT |
mukul975/Anthropic-Cybersecurity-Skills
Extract and decrypt Windows DPAPI-protected secrets (Credential Manager, browser logins/cookies, Wi-Fi credentials, KeePass keys) online or offline using SharpDPAPI, SharpChrome, Mimikatz, or…
MicrosoftDocs/Agent-Skills
Expert knowledge for Azure Key Vault development including troubleshooting, best practices, decision making, architecture & design patterns, limits & quotas, security, configuration, integrations &…
transilienceai/communitytools
Generate ONE strong password and apply it to each referenced file (PDF, Word, Excel, PowerPoint, or any type).
mukul975/Anthropic-Cybersecurity-Skills
Extract stored credentials from compromised endpoints using the LaZagne post-exploitation tool to recover passwords from browsers, databases, system vaults, and applications during authorized red…
openclaw/openclaw
Maintain an Obsidian-friendly memory wiki vault with wikilinks, frontmatter, and official Obsidian CLI awareness.
google-deepmind/science-skills
Instructions for handling API keys and credentials safely, verifying their presence, and prompting the user to add them if missing using a safe protocol.
avibe-bot/avibe
Safely inspect and modify local Avibe configuration, routing, runtime settings, watches, scheduled tasks, Avibe Cloud remote access, and operational state.
avibe-bot/avibe
Audit and improve the prompt surface of Avibe Agents across backends (Claude, Codex/GPT, OpenCode) — global and project rules, Agent system prompts, Skills, delegation briefs, and Task and Watch…
avibe-bot/avibe
Deliver implementation PRs across Avibe, avibe-backend, avibe-docs, avault, and vault-sandbox.
avibe-bot/avibe
Use vibe watch to run a managed Harness waiter that returns to the same conversation later.
avibe-bot/avibe
Build, inspect, update, restore, or share Avibe Show Pages for visual explanations, diagrams, reports, or interactive prototypes.
avibe-bot/avibe
Use Avibe Harness for durable Agent delegation, Sessions, scheduled Tasks, Watches, Runs, queues, and work that must continue beyond the current turn.
Use Avibe Vault for API keys, tokens, passwords, protected credentials, authenticated HTTP requests, or digest signing without exposing secret values to the agent. Use Avibe Vault is an agent skill from avibe-bot/avibe. Use Avibe Vault for API keys, tokens, passwords, protected credentials, authenticated HTTP requests, or digest signing without exposing secret values to the agent.
Run `npx skills add avibe-bot/avibe --skill use-avibe-vault -a claude-code`. Or copy the skill folder (skills/use-avibe-vault in avibe-bot/avibe) into .claude/skills/use-avibe-vault in your project. Claude Code loads it when a task matches its description.
Run `npx skills add avibe-bot/avibe --skill use-avibe-vault -a codex`. Or copy the skill folder (skills/use-avibe-vault in avibe-bot/avibe) into .agents/skills/use-avibe-vault in your project. Codex loads it when a task matches its description.
Cursor, Gemini CLI, GitHub Copilot and OpenCode also load SKILL.md folders. With the skills CLI, run `npx skills add avibe-bot/avibe --skill use-avibe-vault -a cursor` (or -a gemini-cli, github-copilot or opencode for the others). To copy it by hand, put the folder in .cursor/skills/use-avibe-vault, .gemini/skills/use-avibe-vault, .github/skills/use-avibe-vault and .opencode/skills/use-avibe-vault in your project.
Going by SKILL.md and its folder, Use Avibe Vault needs credentials named OPENAI_API_KEY, GITHUB_TOKEN and WALLET_KEY. Our summary lists: Python 3; A credential in OPENAI_API_KEY; A credential in GITHUB_TOKEN.
SKILL.md names 1 domain. In commands or code: api.github.com; the agent is likely to contact it when it follows the instructions. This is read from the text; nothing was executed.
Our automated static check of SKILL.md found no risky patterns, such as piping downloads into a shell, reading credential files or hidden Unicode. It is not a guarantee. Review the folder before installing.
Use Avibe Vault is published under the MIT licence (the repository's licence). It allows redistribution, so the full SKILL.md is shown on this page.
About 1.1k tokens (SKILL.md is roughly 4.4k characters). Agents keep only the skill's name and description in context until a task matches; then they load SKILL.md in full.
Skills that share tags, products or a category with Use Avibe Vault: Abusing Dpapi For Credential Access (mukul975/Anthropic-Cybersecurity-Skills, 34k stars), Azure Key Vault (MicrosoftDocs/Agent-Skills, 776 stars), Protect With Password (transilienceai/communitytools, 563 stars) and Performing Credential Access With Lazagne (mukul975/Anthropic-Cybersecurity-Skills, 34k stars). The comparison table on this page puts their stars, adoption, token cost, safety result and licence side by side.
avibe-bot (a GitHub organization) maintains it in avibe-bot/avibe, which has 624 GitHub stars. The repository holds 7 skills in this directory. The repository was last updated on October 11, 2026.
Source: avibe-bot/avibe on GitHub. Facts on this page come from the repository at the commit we read; the author's words are quoted as theirs.
