What problem does it solve? Storing API keys and tokens in plaintext .env files or hardcoding them in source code exposes credentials to leaks and accidental commits. This Skill provides patterns for securely storing, migrating, and managing credentials in VS Code extensions using the OS-encrypted SecretStorage API. ## Core Features & Use Cases - SecretStorage Implementation: Store, retrieve, and delete tokens using VS Code's encrypted storage backed by Windows Credential Manager, macOS Keychain, or Linux Secret Service. - Environment Variable Migration: Detect secrets in .env files and migrate them non-destructively to SecretStorage with fallback compatibility. - Bidirectional Secrets Flow: Export SecretStorage tokens back to .env files so PowerShell scripts, CLI tools, and CI/CD pipelines can access them. - Use Case: You are building a VS Code extension that calls an external API. Use this Skill to implement a token manager with quick pick UI, password-masked input, validation, and automatic migration of existing environment variables. ## Quick Start Ask the AI to implement a secrets manager service for your VS Code extension that stores API tokens in SecretStorage and migrates existing .env credentials.
