keychain-secure
Manages macOS Keychain credentials securely with balanced operations for storing, retrieving, and validating secrets.
Install this skill
Security score
The keychain-secure skill was audited on Feb 12, 2026 and we found 25 security issues across 2 threat categories, including 8 high-severity. Review the findings below before installing.
Categories Tested
Security Issues
Access to .env file
| 39 | | `.env` file | ❌ Minimal | Readable, often committed to git | |
Access to system keychain/keyring
| 2 | name: keychain-secure |
Access to system keychain/keyring
| 3 | description: macOS Keychain credential management with GF(3) balanced operations |
Access to system keychain/keyring
| 8 | # Keychain Secure Skill: GF(3) Balanced Credential Management |
Access to system keychain/keyring
| 14 | **Frame**: Never env vars, always Keychain |
Access to system keychain/keyring
| 20 | **Keychain Secure** provides secure credential storage on macOS with GF(3) conservation. Every credential lifecycle is balanced: |
Access to system keychain/keyring
| 29 | keychain-secure (-1) ⊗ mdm-cobordism (0) ⊗ gay-mcp (+1) = 0 ✓ [Credential Chain] |
Access to system keychain/keyring
| 30 | keychain-secure (-1) ⊗ unworld (0) ⊗ oapply-colimit (+1) = 0 ✓ [Derivation] |
Access to system keychain/keyring
| 31 | keychain-secure (-1) ⊗ acsets (0) ⊗ koopman-generator (+1) = 0 ✓ [Pattern] |
Access to system keychain/keyring
| 40 | | Keychain | ✅ Encrypted | Hardware-backed, ACL-protected | |
Access to system keychain/keyring
| 42 | **Rule**: Secrets belong in Keychain, never in environment. |
Access to system keychain/keyring
| 123 | from mdm_mcp_server import Keychain, Trit, verify_gf3 |
Access to system keychain/keyring
| 126 | ok, trit = Keychain.store("openai", "api-key", "sk-...") |
Access to system keychain/keyring
| 130 | secret, trit = Keychain.retrieve("openai", "api-key") |
Access to system keychain/keyring
| 134 | ok, trit = Keychain.delete("openai", "api-key") |
Access to system keychain/keyring
| 138 | ok, trits = Keychain.store_then_verify("service", "account", "secret") |
Access to system keychain/keyring
| 145 | require 'keychain_secure' |
Access to system keychain/keyring
| 148 | KeychainSecure.store( |
Access to system keychain/keyring
| 156 | KeychainSecure.balanced_lifecycle( |
Access to system keychain/keyring
| 192 | # MDM enrollment with Keychain-backed credentials |
Access to system keychain/keyring
| 193 | from mdm_mcp_server import W1_GENERATE_KEY, Keychain |
Access to system keychain/keyring
| 196 | Keychain.store("mdm-push-cert", "apns", push_cert_pem) |
Access to system keychain/keyring
| 199 | push_cert, _ = Keychain.retrieve("mdm-push-cert", "apns") |
Access to system keychain/keyring
| 226 | # ✅ GOOD: Secret from Keychain |
Access to system keychain/keyring
| 238 | **Skill Name**: keychain-secure |