automateyournetwork/vault-secrets
workspace/skills/vault-secrets/SKILL.md
Manage HashiCorp Vault KV secrets with strict value protection.
$ install --global
skillsauthnpx skillsauth add automateyournetwork/netclaw vault-secretsInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Apr 24, 2026, 10:36 PM1.7s1 file scanned
SKILL.md
- name:
- vault-secrets
- description:
- Manage HashiCorp Vault KV secrets with strict value protection.
- version:
- 1.0.0
- license:
- Apache-2.0
- author:
- netclaw
- tags:
- []
Vault Secrets Skill
Manage HashiCorp Vault KV secrets with strict value protection.
Tools
| Tool | Description |
|------|-------------|
| read_secret | Read secret metadata (values NEVER displayed) |
| write_secret | Write secret to KV engine |
| list_secrets | List secrets in a path |
| delete_secret | Delete a secret |
| get_secret_metadata | Get secret version metadata |
| inject_secret | Inject secret value to integration |
CRITICAL: Secret Value Protection
Secret values are NEVER displayed in responses. When reading secrets:
- Only metadata is shown (version, created time, etc.)
- Actual secret values are never logged or returned
- Use
inject_toparameter to send secrets directly to integrations
Example Queries
List secrets in the network-devices path
Read metadata for secret network-devices/router-creds
Inject router credentials to pyATS testbed
Write a new secret to network-devices/switch-01
Prerequisites
VAULT_ADDRVault server addressVAULT_TOKENAuthentication token with appropriate policy- Optional:
VAULT_NAMESPACEfor Vault Enterprise
Server
This skill uses the vault-mcp server which connects to Vault API.
Related Skills
automateyournetwork/zoom-meeting-context
tools
VerifiedTrustedCommunity
Zoom meeting intelligence — correlates a live or referenced Zoom meeting discussion against NetClaw's historical meeting record (via the official Zoom Meetings MCP) and today's actual network state. Use when someone in a Zoom meeting references a past discussion or incident ('didn't we have this issue before?'), or asks to search prior meetings for a topic. Does not itself recognize live in-meeting questions — that happens automatically inside zoom-rtms-mcp's own extractor (spec 118) before this skill is ever invoked.
644SKILL.mdUpdated Aug 27, 2026
automateyournetwork/percepxion-oob
tools
VerifiedTrustedCommunity
Manage Lantronix out-of-band (OOB) infrastructure via Percepxion central management platform: device inventory, serial port inspection via SLC CLI, firmware compliance, config management, security auditing, and closed-loop incident remediation. Use during outages, maintenance windows, compliance cycles, and AI-assisted automation workflows.
644SKILL.mdUpdated Aug 13, 2026
automateyournetwork/n2n-federation
tools
VerifiedTrustedCommunity
Federate your NetClaw with other NetClaw operators over the BGP mesh — exchange capability inventories and ask your claw what a peer can do. (US1; remote invocation and chat land in later phases.)
638SKILL.mdUpdated Jul 11, 2026
automateyournetwork/token-tracker
tools
VerifiedTrustedCommunity
Track token consumption, enforce session budgets, and display cost for every NetClaw interaction.
638SKILL.mdUpdated Apr 3, 2026