yao-secret

yao-secret is an open-source security skill for Claude Code and compatible agents, published by YaoApp. Its author describes it as: “Secret management expert. ALWAYS invoke this skill when you need to read API keys, tokens, or other secrets configured by the user. Never hardcode credentials — use this skill to retrieve them securely.”. The project has 7.7k stars on GitHub and ships custom license terms, so review them before reuse. Add it to your setup with `git clone https://github.com/YaoApp/yao ~/.claude/skills/yao-secret`.

What yao-secret does

Two tools for accessing user-configured secrets, called via bash.

Installation

Add yao-secret to your agent with:

git clone https://github.com/YaoApp/yao ~/.claude/skills/yao-secret

Always review a skill's source before installing it. This command comes from the skill's public repository; the linked repo is the source of truth for exact setup steps.

What's inside

The SKILL.md for yao-secret is organised into these sections:

• secretlist
• secretread
• Typical Workflow
• Guidelines

When to use it

Reach for yao-secret when you want security help from your agent without writing the same instructions every session. Load the skill and the agent picks it up automatically for relevant tasks.

Strengths

• Ships in YaoApp/yao, an established project with 7,686 GitHub stars
• Actively maintained (recent commits)

Things to check

• No license declared — confirm terms with the author before reuse

Topics

Frequently asked questions

What does yao-secret do?

Secret management expert. ALWAYS invoke this skill when you need to read API keys, tokens, or other secrets configured by the user. Never hardcode credentials — use this skill to retrieve them securely.

How do I install yao-secret?

Run git clone https://github.com/YaoApp/yao ~/.claude/skills/yao-secret in your agent, then reload your skills. Review the source at https://github.com/YaoApp/yao before installing.

Is yao-secret free to use?

yao-secret is publicly available on GitHub, but YaoApp has not declared a standard open-source license (Other). Confirm the terms with the author before reusing it.

Where does yao-secret come from?

yao-secret ships inside YaoApp/yao, a repository that contains 11 catalogued skills in total. The repository's 7,686 GitHub stars apply to that whole collection, not to this skill on its own.