secrets

secrets is a command for coding agents from fcakyon/claude-codex-settings. It costs 0 tokens per session (82 once invoked), scanned A, original, Apache-2.0.

A command group for storing and managing environment variables and secrets for Supabase Edge Functions, which are server-side functions hosted by Supabase.

In plain words
What is it for?
Use it to set, remove, or list function secrets, either individually or by loading them from an environment file.
Why use it?
It keeps sensitive configuration such as credentials out of source code and makes environment-specific values available to those functions.

Command

Part of the supabase-skills plugin — 3 skills, 12 commands shipped together

About the project

claude-codex-settings is a collection of configurations and reusable extensions for Claude Code, OpenAI Codex, Cursor, and related coding tools. Developers use its skills, commands, hooks, agents, plugins, and MCP servers to shape coding-agent workflows and connect alternative model APIs. The catalogue entries are components of this collection that can be installed into supported coding tools.

fcakyon/claude-codex-settings · 1,127 stars · on GitHub

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods
npx agentmods add commands/fcakyon/claude-codex-settings/secrets
Clone the repo
git clone --depth 1 https://github.com/fcakyon/claude-codex-settings

Or install supabase-skills, the plugin that ships this one along with the rest of its 3 skills, 12 commands.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for secrets

README.md
[![agentmods](https://agentmods.dev/badge/commands/fcakyon/claude-codex-settings/secrets.svg)](https://agentmods.dev/commands/fcakyon/claude-codex-settings/secrets)
Your own site
<a href="https://agentmods.dev/commands/fcakyon/claude-codex-settings/secrets"><img src="https://agentmods.dev/badge/commands/fcakyon/claude-codex-settings/secrets.svg" alt="Measured on agentmods" height="20"></a>
Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.
When invoked 82 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. Scan, not verified.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5 $0.00000 $0.00082
Opus 5 $0.00000 $0.00041
Sonnet 5 $0.00000 $0.00016
Haiku 4.5 $0.00000 $0.00008

Measured 2d ago against content hash 16f98c96004c, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

secrets scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/supabase-skills/skills/supabase-cli/references/commands/secrets.md · 13 lines

What it actually says

supabase-secrets

Provides tools for managing environment variables and secrets for your Supabase project.

This command group allows you to set, unset, and list secrets that are securely stored and made available to Edge Functions as environment variables.

Secrets management through the CLI is useful for:

  • Setting environment-specific configuration
  • Managing sensitive credentials securely

Secrets can be set individually or loaded from .env files for convenience.

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 13 lines · 0 tokens per session scan A 16f98c96004c

Subscribe to this mod's changes

secrets is a command published in the GitHub repository fcakyon/claude-codex-settings (1,127 stars, last pushed yesterday), licensed Apache-2.0. It costs nothing until one of its globs matches a file; then it loads 82 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-09-03.

Related

Other commands, from other repositories

wa-guardrails

Generate preventive Well-Architected guardrails — AWS Config rules, Service Control Policies, permission boundaries, CloudWatch alarms, and IaC policy checks (CDK Aspects, cfn-guard, OPA/Sentinel) — so a workload stays aligned with Well-Architected best practices over time instead of being assessed once.

aws-samples/sample-well-architected-skills-and-steering · 0 tokens

cost-optimization-review

Run a pillar-scoped Well-Architected review focused on the Cost Optimization pillar.

aws-samples/sample-well-architected-skills-and-steering · 0 tokens

start-13-5.es

Bienvenido a Lección 13-5: Despliegue en Vercel.

minicoohei/ai-agent-camp · 2 tokens

start-13-5.en

Command "start-13-5.en" from minicoohei/ai-agent-camp, covering 🎓 lesson 13-5: vercel deploy, 📍 what you'll do, 🎯 readiness check, 🔍 step 0: check project existence and check if output/lp-project directory exists.

minicoohei/ai-agent-camp · 2 tokens

nyann:apply

Apply an Infrastructure-as-Code change — the highest-stakes mutator in nyann; it can change real cloud infrastructure. Re-runs the plan, shows it, confirms, then applies. Unmistakably opt-in: apply is never the default and destructive applies require a second explicit confirm. For IaC apply intent only (not "apply a…

thettwe/nyann · 85 tokens

crossframe-inquiry

Use CrossFrame Inquiry after a completed CrossFrame diagnosis, article, review, or suite workflow when the user wants follow-up questions, counterexamples, missing evidence, transfer conditions, or action boundaries.

xi-kari/crossframe-skill · 0 tokens