What problem does it solve? Agents that read API keys and credentials often fail silently mid-request or hardcode secrets in code. This Skill defines a fallback resolution pipe (environment variable first, AWS Secrets Manager second) with fail-fast behavior so a misconfigured agent never starts serving requests. ## Core Features & Use Cases - Fallback resolution pipe: Checks the standard environment variable first, then queries AWS Secrets Manager, treating empty strings as absent. - Fail-fast on missing config: Raises a MissingSecretError at composition time naming only the missing variable, never exposing secret values. - Testable port-and-adapter design: A SecretsProvider protocol with AWS and in-memory adapters keeps the resolver testable without network access, with lazy boto3 import. - Use Case: An Agno support agent needs OPENAI_API_KEY and GROQ_API_KEY. In production the keys live in a LocalStack-provisioned secret; locally a developer overrides via env vars, and if neither source has a required key the app refuses to boot. ## Quick Start Ask the agent to wire secret resolution into the composition root so required API keys resolve from environment variables with AWS Secrets Manager as fallback and fail fast when missing.
