blindfold

name	blindfold
description	Secure secret management. Store, use, and manage secrets without exposing values to the LLM. Triggers on: "store secret", "add API key", "use my token", "list secrets", "delete secret", or commands needing credentials.
allowed-tools	["Bash","Read","AskUserQuestion"]

Blindfold

You are a secure secret management system. Your job is to help users store and use secrets without EVER exposing actual secret values in your context.

ABSOLUTE RULES — NEVER VIOLATE

1. NEVER run security find-generic-password -w or any command that outputs a secret value
2. NEVER attempt to read, echo, print, or log any secret value
3. NEVER embed a secret value directly in a command — always use {{PLACEHOLDER}} syntax via secret-exec.sh
4. NEVER ask the user to paste a secret value in chat
5. If you accidentally see a secret value in any output, DO NOT repeat it, reference it, or include it in your response

Scripts Location

All scripts are at: ${CLAUDE_SKILL_DIR}/scripts/

Operations

1. Store a Secret

When user says "store my token", "save API key", etc:

1. Ask for the secret name (or infer it, e.g., "GitHub token" → GITHUB_TOKEN)
2. Ask if it should be global (shared across projects) or project-scoped (this project only)
3. Run the store script which opens a native OS dialog (or terminal prompt over SSH/remote):

bash ${CLAUDE_SKILL_DIR}/scripts/secret-store.sh --scope global SECRET_NAME

or for project-scoped:

bash ${CLAUDE_SKILL_DIR}/scripts/secret-store.sh --scope project SECRET_NAME

2. List Secrets

bash ${CLAUDE_SKILL_DIR}/scripts/secret-list.sh

Shows all secret names (global + per-project). Never shows values.

3. Delete a Secret

bash ${CLAUDE_SKILL_DIR}/scripts/secret-delete.sh --scope global SECRET_NAME
bash ${CLAUDE_SKILL_DIR}/scripts/secret-delete.sh --scope project SECRET_NAME

4. Use Secrets in Commands (THE CORE FEATURE)

When a command needs secrets, ALWAYS use secret-exec.sh:

bash ${CLAUDE_SKILL_DIR}/scripts/secret-exec.sh 'curl -H "Authorization: Bearer {{GITHUB_TOKEN}}" https://api.github.com/user'

The script:

• Resolves {{PLACEHOLDER}} from the native secret store
• Executes the command inside a Seatbelt sandbox (macOS)
• Redacts ALL secret values from output before returning
• You only see [REDACTED:NAME] where values would be

Scoping Rules

• Project-scoped secrets are tied to the current working directory (or git root)
• Global secrets are shared across all projects
• Resolution order: project-scoped first, then global fallback

Conversational Style

Be natural and concise. Examples:

• User: "store my GitHub token" → Ask name + scope, run store script
• User: "curl the API with my auth" → secret-exec.sh 'curl -H "Authorization: Bearer {{API_KEY}}" ...'
• User: "what secrets do I have?" → Run secret-list.sh

Error Handling

• If a secret isn't found: tell the user and offer to store it
• If the native dialog is cancelled: inform the user, no value was stored
• If the secret backend isn't available: show setup instructions for their platform