Overview
yao-secret is an open-source security skill for Claude Code and compatible agents, published by YaoApp. Its author describes it as: “Secret management expert. ALWAYS invoke this skill when you need to read API keys, tokens, or other secrets configured by the user. Never hardcode credentials — use this skill to retrieve them securely.”. The project has 7.7k stars on GitHub and ships custom license terms, so review them before reuse. Add it to your setup with `git clone https://github.com/YaoApp/yao ~/.claude/skills/yao-secret`.
What yao-secret does
Two tools for accessing user-configured secrets, called via bash.
What’s inside
The SKILL.md for yao-secret is organised into these sections:
- secretlist
- secretread
- Typical Workflow
- Guidelines
Installation
Add yao-secret to your agent with:
git clone https://github.com/YaoApp/yao ~/.claude/skills/yao-secretReview a skill’s source before installing it — skills can instruct your agent to run commands. This command comes from the skill’s public repository, which is the source of truth for setup steps. New to skills? Read how to install Claude Code skills.
Supported agents
- Claude Code — declared in the repository topics
License
YaoApp has not declared a standard open-source license for this repository (Other). Confirm the terms with the author before reusing it.
Strengths
- Ships in YaoApp/yao, an established project with 7,686 GitHub stars
- Works with Claude Code
- Actively maintained — repository updated in the last 90 days
Things to check
- No license declared — confirm terms with the author before reuse
Author
Topics
Frequently asked questions
- What does yao-secret do?
- Secret management expert. ALWAYS invoke this skill when you need to read API keys, tokens, or other secrets configured by the user. Never hardcode credentials — use this skill to retrieve them securely.
- How do I install yao-secret?
- Run git clone https://github.com/YaoApp/yao ~/.claude/skills/yao-secret in your agent, then reload your skills. Review the source at https://github.com/YaoApp/yao before installing.
- Is yao-secret free to use?
- yao-secret is publicly available on GitHub, but YaoApp has not declared a standard open-source license (Other). Confirm the terms with the author before reusing it.
- Which agents does yao-secret work with?
- yao-secret lists Claude Code — named in its SKILL.md, its plugin marketplace or its repository topics. Skills use the portable SKILL.md format, so other agents that read that format may load it too.
- Where does yao-secret come from?
- yao-secret ships inside YaoApp/yao, a repository that contains 11 catalogued skills in total. The repository's 7,686 GitHub stars apply to that whole collection, not to this skill on its own.
