General skillSecurity and privacy
blind-vault
Use macOS Keychain secrets without placing their values in agent context
- Stars
- 0
- Forks
- 0
- Updated
- Updated Jul 10, 2026
MIT
Use macOS Keychain secrets without placing their values in agent context
blind-vault is a macOS-only local secret tool that stores credentials in Keychain and exposes only pointer metadata such as names, scopes, and dates to the agent. Its CLI injects a value into a child-process environment without printing it, and scope checks can block mismatched commands. It keeps secrets out of chats, files, and ordinary tool output, but it is not an HSM and does not protect against malware running as the same user, brief process observation, or clipboard sniffing.
Resource types
Use cases
Platforms
Audit suspension risks in a Claude Code working environment.
Check whether a specific CVE actually applies to your environment.
Runtime
Capabilities
Audience
Public GitHub facts last synced Jul 10, 2026.
Store and inject development secrets through 1Password from Claude Code.
Audit a deployed public app for production gaps missed during coding.