output-credentials-env-vars
Wire encrypted credentials to environment variables using the credential: convention. Use when setting up LLM provider keys (ANTHROPIC_API_KEY, OPENAI_API_KEY) or any env var that should come from encrypted credentials.
Install
With your agent
Install OMGSkills skill "growthxai/output:coding_assistants/claude/plugins/outputai/skills/output-credentials-env-vars" into this agent's normal skills directory: call the OMGSkills MCP get_install_plan tool for your agent and run the script it returns (it installs only the pinned commit and verifies SKILL.md), and stop if MCP or the pin is unavailable. Do not overwrite or change existing skills without asking me.
Manual command
git clone https://github.com/growthxai/output /tmp/output && ln -s /tmp/output/coding_assistants/claude/plugins/outputai/skills/output-credentials-env-vars ~/.claude/skills/output-credentials-env-varsFrom README
Credentials as Environment Variables When to Use This Skill Setting up ANTHROPICAPIKEY or OPENAIAPIKEY from encrypted credentials Wiring any credential path to a process.env variable automatically Migrating from plaintext .env secrets to encrypted credentials Understanding why an env var is being resolved at worker startup The credential: Convention Any env var whose value starts with credential: is resolved from encrypted credentials at worker startup. The format is: Example .env Encrypted credentials (config/credentials.yml.enc) How It Works When the worker starts, every env var set to credential: is replaced with the decrypted value at that path. By the time a workflow runs, ANTHROPICAPIKEY holds the real key and LLM SDKs read it as usual. Values come from the global credentials for the current environment: config/credentials/ .yml.enc when it exists, otherwise config/credentials.yml.enc.