Skill Detail
Encrypt and decrypt age secrets with hardware-backed YubiKey identities
Use age-plugin-yubikey when an agent needs age encryption tied to a physical YubiKey identity instead of software-only keys.
Security & VerificationMulti-Framework
Security & Verification
Multi-Framework
Security Reviewed
⭐ 881 GitHub stars
INSTALL WITH ANY AGENT
npx skills add agentskillexchange/skills --skill encrypt-and-decrypt-age-secrets-with-hardware-backed-yubikey-identities
Works best when you want a reusable capability, not another fragile one-off prompt.
At a glance
Tools required
age, age-plugin-yubikey, and a configured YubiKey with supported credentials
Install & setup
Install age and age-plugin-yubikey, initialize the YubiKey-backed age identity described in the project docs, then use standard age commands with the plugin-enabled recipient or identity flow.
Author
str4d
Publisher
Open Source Project
Last updated
Apr 19, 2026
Quick brief
age-plugin-yubikey adds a concrete hardware-backed secret workflow to age encryption. Invoke this when the task requires encrypting or decrypting age-managed secrets through a YubiKey-held identity, rather than handling plaintext secrets or ordinary software keys in the filesystem.
How it works
What this skill actually does
The scope boundary is age encryption with YubiKey-backed recipient identities and operator presence requirements. That makes it a specific security workflow, not just a generic hardware token or encryption product card.