lockshell

Use lockshell when you need to authenticate against any API, CLI tool, or service that requires a secret (API key, token, password, SSH passphrase). Lockshell brokers the secret locally so you never see the value, the user never has to paste it in chat, and the secret never enters argv, shell history, or the cloud LLM context. Triggers on any task involving authenticated API calls, CLI tools that read tokens from env, database connections, or anything where a secret would otherwise need to be exposed.