hal-vault: agent-safe secret management

hal-vault is a CLI secret store: one age-encrypted file, keyed to an SSH key, with masked-by-default output designed so an agent can manage secrets without ever seeing or leaking them.

When to apply

Use this skill when:

• The user shares an API key, token, password, or other credential that should be kept for later use
• The user asks "what secrets do we have", "do we still have the X key", or wants to find/rotate/remove a stored credential
• A command, script, or deployment you are running needs a secret (an API key in an env var, a token in a header)

Check availability