name: pass-secrets
repo: https://github.com/dyiapanis/pass-secrets
sha: 485f105150e09dad28461b26b9eca9ffc511b15d
description: "pass (password-store) secret source: resolves secrets from a local, GPG-encrypted, git-tracked password store into environment variables at startup, as a first-class SecretSource beside the built-in Bitwarden and 1Password sources. Stdlib-only (subprocess + pathlib), no Python deps, no network — ever. Config: secrets.pass.{enabled,store_path,subdirs,override_existing,timeout_seconds}. Disclosure — when enabled, shells out to the local pass binary (10 s per entry) for every .gpg entry under the configured store subdirs and injects each as an env var that by default overrides .env and shell values; when enabled, also adds a ~900-char system-prompt note about secret resolution; no network."
maintainer: dyiapanis
tier: community
category: tools
requires_hermes: ">=0.21.4"
docs_url: https://github.com/dyiapanis/pass-secrets#readme
version: "1.0.0"
readme: true
platforms: []
capabilities:
  provides_tools: []
  provides_hooks: []
  provides_middleware: []
  requires_env: []