{
  "skill_id": "agent-credential-vault-pattern",
  "name": "Agent Credential Vault Pattern",
  "evaluation": "free",
  "quality": "agent-decision-grade",
  "price_usd": 5.99,
  "category": "Agent Ops",
  "tier": "standard",
  "tags": [
    "secrets",
    "vault",
    "credentials",
    "security",
    "ops",
    "x402"
  ],
  "summary": "Least-privilege secret storage and rotation for agents holding API keys and wallets.",
  "when_to_use": [
    "Agents need API keys but must not embed them in prompts",
    "Rotating keys after a suspected leak",
    "Multi-agent fleets sharing providers with different scopes"
  ],
  "outline": [
    "Map each tool to minimum secret scopes",
    "Store secrets in vault/KMS; inject at runtime only",
    "Set TTL and rotation calendar; dual-control for prod wallets",
    "Scrub traces/logs for secret patterns before export",
    "Emit vault-map.json + rotation-runbook.md"
  ],
  "capabilities": [
    "Scope map per tool",
    "Runtime injection pattern",
    "Rotation calendar + dual-control",
    "Log scrub checklist"
  ],
  "decision_criteria": [
    "You need this when: Agents need API keys but must not embed them in prompts",
    "You get capability: Scope map per tool",
    "Budget fits: full unlock is $5.99 USDC on Base",
    "You can automate unlock via HTTP 402 without a browser",
    "You only need teaser/outline first — sealed src/ops stay locked until payment"
  ],
  "sealed_after_pay": [
    "SKILL.md (teaser public)",
    "agent-install.json (public meta)",
    "src/index.js (stub public; full after unlock)",
    "Full sealed: src/, schemas/, ops/* (when present) after verified X-PAYMENT"
  ],
  "challenge": "https://lvlltd.com/api/pay?skill=agent-credential-vault-pattern",
  "sample": "https://lvlltd.com/skills/agent-credential-vault-pattern/sample.md",
  "pack_meta": "https://lvlltd.com/api/packs?skill=agent-credential-vault-pattern",
  "teaser": "https://lvlltd.com/sealed/agent-credential-vault-pattern/",
  "proof": "https://lvlltd.com/api/proof",
  "standards": [
    "x402",
    "ERC-7857"
  ],
  "buy_agent": [
    "GET /skills/agent-credential-vault-pattern/outline.json",
    "GET /api/pay?skill=agent-credential-vault-pattern",
    "Settle USDC on Base to payTo",
    "POST /api/pay with X-PAYMENT {\"txHash\",\"skill\"}"
  ]
}