How do I install the Vault Secrets skill?

Run npx skillmds@latest add gabrielmoreira/vault-secrets in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

What does the Vault Secrets skill do?

Manage HashiCorp Vault KV secrets with strict value protection. It is listed under Coding & Dev Tools on SkillMD.

Is Vault Secrets safe to use?

This skill has not completed SkillMD's automated safety review yet. Capability flags: reads secrets. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with Vault Secrets?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is Vault Secrets free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under Apache-2.

Who published Vault Secrets?

gabrielmoreira (@gabrielmoreira) published this skill. Their other Agent Skills are listed on their SkillMD profile.

Vault Secrets by gabrielmoreira — Agent Skill

Name: Vault Secrets
Rating: 4.2 (5 reviews)
Author: gabrielmoreira

File contents

Vault Secrets Skill

Manage HashiCorp Vault KV secrets with strict value protection.

Tools

Tool	Description
`read_secret`	Read secret metadata (values NEVER displayed)
`write_secret`	Write secret to KV engine
`list_secrets`	List secrets in a path
`delete_secret`	Delete a secret
`get_secret_metadata`	Get secret version metadata
`inject_secret`	Inject secret value to integration

CRITICAL: Secret Value Protection

Secret values are NEVER displayed in responses. When reading secrets:

Only metadata is shown (version, created time, etc.)
Actual secret values are never logged or returned
Use inject_to parameter to send secrets directly to integrations

Example Queries

List secrets in the network-devices path

Read metadata for secret network-devices/router-creds

Inject router credentials to pyATS testbed

Write a new secret to network-devices/switch-01

Prerequisites

VAULT_ADDR Vault server address
VAULT_TOKEN Authentication token with appropriate policy
Optional: VAULT_NAMESPACE for Vault Enterprise

Server

This skill uses the vault-mcp server which connects to Vault API.

Frequently asked questions

Vault Secrets