secure-secret-drop

Secure Secret Drop Use this local skill when a user needs to provide secrets without chat or vault. It creates a temporary public capability URL over an isolated Cloudflare Quick Tunnel backed by an HTTP origin bound only to 127.0.0.1 , then writes submitted bytes directly to an explicitly authorized destination file without placing them in model context. Requirements and first-run setup Required: Python 3 with the standard library; no Python packages are needed. The cloudflared executable. Outbound network access to Cloudflare. The local form origin binds only to 127.0.0.1 . A Cloudflare account, domain, API token, cloudflared tunnel login , named tunnel, DNS record, and background service are not required. This skill creates an anonymous, temporary Quick Tunnel for each drop. Before creating the first form, run doctor . If it reports cloudflared=missing , do not attempt create and do not tell the user to solve it manually when terminal tools are available. Read Cloudflared setup , identify the host OS and package manager, explain the proposed installation, obtain any approval required for package installation or sudo , install from Cloudflare's official distribution channel, and rerun both cloudflared --version and doctor . Never run cloudflared tunnel login , create DNS, install a tunnel service, or alter an existing Cloudflare configuration for this skill. If cloudflared is installed outside PATH , set CLOUDFLARED_BIN to its absolute executable path for the command invocation or agent service environment. The CLI also checks common macOS/Linux locations automatically. Workflow Show more Installs 1.4K Repository moeadham/secure…ret-drop GitHub Stars 1 First Seen Sep 18, 2026 Security Audits Gen Agent Trust Hub Pass Socket Warn Snyk Warn