Hush — AI skill for Claude Code
a secret store for ai agents with one rule: the agent never sees the plaintext.
How to install Hush
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open royashbrook/hush and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Hush does
a secret store for ai agents with one rule: the agent never sees the plaintext. get a secret once into the os keychain, then inject it into commands forever. no get, cross-platform, mit
Alternatives in AI
README
a secret store for AI agents, the one with no get.
get a secret once into the OS keychain, then inject it into commands forever, the value never hits stdout, the transcript, or the cloud.
A secret store for AI agents, with one hard rule: **the agent never sees the plaintext.**
Values never reach stdout, so they never land in the tool result, the transcript, or the cloud. A secret only ever moves from the store straight into the consumer. There's no `get` on purpose, a plain getter is the leak.
The point: you (an agent) are running as the user with their CLIs already authed, so you can already set a server-side secret or call a service, you just can't *see* the value without it landing in the chat. hush gets it once into the OS keychain, then you inject it into those commands forever. No chat paste, no temp files, no `.env` to commit by accident.
agents: start here
**If you were handed this repo's url, install yourself, then follow the playbook.** Get the `hush` script onto the box and read [`SKILL.md`](SKILL.md), that's the whole onboarding (it covers store / mint / inject and how to adopt hush in the repo you're working in). The script is one self-contained bash file; put it wherever y
Related Skills
LLM Secret Manager
The secret manager for LLM agents: create, rotate, and use secrets they can never read. OS-native keyvault (ma
Neuralyzer
Your AI agent saw your API keys, and saved them in plaintext forever. Scan, redact and rotate secrets in Claud
MCP Warden
Local-first credential broker for MCP. AI coding agents (Claude Code, Cursor, Codex…) call APIs, SSH and datab
Evermind AI Agent Memory
Evermind: cross-session memory recovery for AI agents. Your agent never cold-starts again - always-loaded iden
Claude Code Secret Guard
Claude Code mod that keeps API keys, tokens and passwords out of the model's context: gitleaks scans every too
Ask Kilo
Get an advisory second opinion from an external non-Claude model via the kilo CLI. Prompt-only — kilo never se
Related Agents
Byok Token Security Expert
BYOK (Bring-Your-Own-Key) and OAuth token security expert. Deep on cross-platform OS keychain integration (mac
iOS Expert
iOS impact analysis and review for a feature — Info.plist usage descriptions, entitlements, Keychain, Face ID
Spgr Agent Mobile Developer
Implements cross-platform or native mobile features from approved screen specs and API contracts, test-first,