jankneumann/bao-vault
skills/bao-vault/SKILL.md
OpenBao/Vault credential seeding and management scripts
$ install --global
skillsauthnpx skillsauth add jankneumann/agentic-coding-tools bao-vaultInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: May 15, 2026, 7:42 AM124.4s4 files scanned
SKILL.md
- name:
- bao-vault
- description:
- OpenBao/Vault credential seeding and management scripts
- category:
- Infrastructure
- tags:
- [bao, vault, credentials, infrastructure]
- user_invocable:
- false
Bao Vault Infrastructure Skill
Non-user-invocable infrastructure skill for OpenBao/Vault credential seeding and management.
Scripts
scripts/bao_seed.py
Seeds OpenBao with agent API keys and secrets from agents.yaml configuration. Reads any string-valued key in .secrets.yaml and writes it under the configured KV mount, so adding new credential names (e.g. LANGFUSE_PUBLIC_KEY) requires no code change — just add the key to .secrets.yaml and re-run.
Usage:
python3 "<skill-base-dir>/scripts/bao_seed.py" [options]
Environment variables:
BAO_ADDR— OpenBao server addressBAO_TOKEN— Root or privileged token for seeding
Exit codes: 0 = seeded successfully, 1 = error
scripts/langfuse_env.sh
Resolves LANGFUSE_PUBLIC_KEY, LANGFUSE_SECRET_KEY, and LANGFUSE_HOST from OpenBao (preferring values already in the environment), computes LANGFUSE_BASIC_AUTH = base64(public:secret), and emits four export lines on stdout. Designed to be sourced via eval:
eval "$(skills/bao-vault/scripts/langfuse_env.sh)"
Falls back silently when BAO_ADDR is unset or the keys are already populated, so it is safe to put in shell init or scripts.
Authentication: prefers BAO_TOKEN if set, otherwise uses AppRole login via BAO_ROLE_ID + BAO_SECRET_ID (matches bao_seed.py).
Consumed by:
skills/langfuse/scripts/install-mcp.sh— to compute the literal Basic-auth token written into Codex / Gemini user-global config files.skills/langfuse/scripts/run_stop_hook.sh— to populate the env for the Claude Code Stop-hook tracer.
Related Skills
jankneumann/obsidian-markdown
testing
VerifiedTrustedCommunity
Create and edit Obsidian Flavored Markdown with wikilinks, embeds, callouts, properties, and other Obsidian-specific syntax. Use when working with .md files in Obsidian, or when the user mentions wikilinks, callouts, frontmatter, tags, embeds, or Obsidian notes.
4SKILL.mdUpdated Jun 6, 2026
jankneumann/obsidian-cli
tools
VerifiedTrustedCommunity
Interact with Obsidian vaults using the Obsidian CLI to read, create, search, and manage notes, tasks, properties, and more. Also supports plugin and theme development with commands to reload plugins, run JavaScript, capture errors, take screenshots, and inspect the DOM. Use when the user asks to interact with their Obsidian vault, manage notes, search vault content, perform vault operations from the command line, or develop and debug Obsidian plugins and themes.
4SKILL.mdUpdated Jun 6, 2026
jankneumann/obsidian-bases
data-ai
VerifiedTrustedCommunity
Create and edit Obsidian Bases (.base files) with views, filters, formulas, and summaries. Use when working with .base files, creating database-like views of notes, or when the user mentions Bases, table views, card views, filters, or formulas in Obsidian.
4SKILL.mdUpdated Jun 6, 2026
jankneumann/json-canvas
tools
VerifiedTrustedCommunity
Create and edit JSON Canvas files (.canvas) with nodes, edges, groups, and connections. Use when working with .canvas files, creating visual canvases, mind maps, flowcharts, or when the user mentions Canvas files in Obsidian.
4SKILL.mdUpdated Jun 6, 2026