agentio-vault

Manage encrypted credential vaults for the agentio CLI across local and CI environments.

2|Updated Jan 3, 2026
One-click install
npx skills add https://github.com/plosson/agentio --skill agentio-vault-plosson
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: agentio-vault
Source: https://github.com/plosson/agentio/tree/main/claude/skills/agentio-vault
Command: npx skills add https://github.com/plosson/agentio --skill agentio-vault-plosson

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Storing and moving API credentials for Gmail, Slack, JIRA, and other services between a local machine and CI/CD pipelines is error-prone and insecure when done with plain-text files or scattered environment variables. This Skill manages the agentio encrypted vault so credentials are created, exported, imported, and rotated through a single CLI. ## Core Features & Use Cases - Vault Lifecycle Management: Initialize a new encrypted vault, point agentio at an existing vault file, check vault status, or reset and clear stored credentials. - Encrypted Export and Import: Export all profiles and credentials as an encrypted blob with a 64-hex-character key, then import them in CI via the AGENTIO_CONFIG and AGENTIO_KEY environment variables. - Passphrase Handling: Change vault passphrases non-interactively using stdin or environment variables, keeping secrets out of shell history and process lists. - Use Case: Authenticate Gmail and Slack locally, run agentio vault export --all --file ./agentio.enc, store the output as GitHub Actions secrets, and run agentio vault import in a scheduled workflow to triage your inbox without any servers. ## Quick Start Use the agentio vault skill to initialize a new vault and export my credentials as an encrypted file for use in GitHub Actions.

Frequently Asked Questions about agentio-vault

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I export agentio credentials for GitHub Actions?▼

Run agentio vault export --all to print AGENTIO_KEY and AGENTIO_CONFIG values, or use --file to write the encrypted blob to disk. Store both as repository secrets, then run agentio vault import in your workflow to restore the configuration.

How to create an agentio vault non-interactively in CI?▼

Pipe the passphrase via stdin using printf %s "$VAULT_PW" | agentio vault init --passphrase-stdin, or set the AGENTIO_PASSPHRASE environment variable. Off a TTY, one of these passphrase sources is required since interactive prompts are unavailable.

Can I merge imported credentials with an existing agentio vault?▼

Yes, pass the --merge flag to agentio vault import to add only missing profiles and credentials instead of replacing the existing configuration. Without --merge, the import replaces the current vault contents.

What is the difference between agentio vault reset and vault clear?▼

vault clear deletes all profiles and credentials inside the vault but keeps the vault file, while vault reset deletes the vault file, pointer, and stored passphrase entirely. Both support --force to skip confirmation prompts.

How do I avoid exposing the vault passphrase in shell history?▼

Use --passphrase-stdin to read the passphrase from a pipe, or set the AGENTIO_PASSPHRASE environment variable. The --passphrase flag works but leaves the value visible in shell history and the process list.