Add/connect to secret store, and make available to local commands

[mustafamohsen]

Many commands require API keys, tokens, etc. for example:

wpscan --api-token abcdefg

It's insecure to include a secrets in the LLM prompt. Rather, an environment variable reference may be passed in the prompt, which gets returned in the execution instructions. Example prompt:

scan example.com using wpscan. Use $WPSCAN_API for the API token

Which may return a command like

wpscan --api-token $WPSCAN_API --url example.com

These variables are ought to be set on the front end, and/or pulled from a local or remote secret management platform (e.g. infiscal)

Update

Example use cases

• Proxy credentials
• Services API tokens
• SSH keys
• Server accounts

[frdel]

This is on the roadmap.

[mustafamohsen]

This is on the roadmap.

@frdel Good to hear so. Is the roadmap public? I couldn't find it