List in Claude Code skill registries / awesome lists for discoverability

[nabsha]

For agent + human discovery, submit kdbx to relevant Claude Code skill marketplaces and awesome-claude-code-style lists once it's stable and Windows-verified.

[nabsha]

Progress on #4 (discoverability listings)

Done

• ✅ skills.sh — repo is auto-indexed via Skills-CLI install telemetry (nothing to submit). Added a live badge in the README → https://skills.sh/yarrasys/extensions
• ✅ travisvn/awesome-claude-skills (~14k★) — PR opened: Add kdbx to Community → Individual Skills travisvn/awesome-claude-skills#916 (Community → Individual Skills table).

Pending — awesome-claude-code (hesreallyhim/awesome-claude-code, ~47k★)
Cannot be automated. Its submission template forbids gh/programmatic submission ("submissions via the gh CLI … will be automatically closed") and requires a human-ticked "not electrical circuits" checkbox. It also requires the resource to be ≥ 1 week old from first public commit.

• First public commit: 2026-06-27 → earliest eligible submission: 2026-07-04.
• Submit by hand via the web form: https://github.com/hesreallyhim/awesome-claude-code/issues/new?template=recommend-resource.yml

Ready-to-paste field values:

Field	Value
Display Name	kdbx
Category	Agent Skills
Sub-Category	General
Primary Link	https://github.com/yarrasys/extensions/tree/main/skills/kdbx
Author Name	Nabeel Shaheen (nabsha)
Author Link	https://github.com/nabsha
License	MIT

Description (1–3 sentences, no emojis, descriptive):

Manages per-project and per-environment secrets in key-file-only KeePassXC (.kdbx) vaults as a managed replacement for .env. Secrets are injected into commands via kdbx run -- <cmd> and never printed to the transcript, logs, or shell history. Built for AI coding agents: the agent handles entry paths and variable names only and never authors or observes a secret value.

Validate Claims:

Install the skill and confirm a stored secret is never revealed: kdbx set api/demo stores a value, kdbx get api/demo returns the masked sentinel (set, hidden), and kdbx run -- sh -c 'echo $API_DEMO is ${#API_DEMO} chars' shows the value is present only inside the child process — it never appears in Claude's output or shell history.

Specific Task(s):

Set up managed secrets for a repository and run its dev server with an API key injected from the vault instead of a .env file.

Specific Prompt(s):

"Using the kdbx skill, initialize a dev vault for this project, register an OPENAI_API_KEY mapping, then run npm run dev with the key injected from the vault — without writing it to .env or printing it."

Checklist: all tick true on/after 2026-07-04 (the ≥1-week box is the gating one).

---

Not pursued (this round): anthropics/claude-plugins-official (needs repackaging kdbx as a plugin + Anthropic security review) and ComposioHQ (requires vendoring a copy). Both can be filed as separate issues if we want them later.

[nabsha]

Split the awesome-claude-code submission into its own tracking ticket: #5 (manual web-form, eligible 2026-07-04). This issue (#4) tracks the overall listing effort — skills.sh ✅, travisvn PR open (travisvn/awesome-claude-skills#916), awesome-claude-code → #5.

[nabsha]

The official plugin directory (anthropics/claude-plugins-official) path is now tracked in #6 — it requires packaging kdbx as a plugin first. #6 keeps the skill as the source of truth and adds a plugin wrapper (leak-guard hook + MCP) in this same repo as a marketplace.