Giving your AI agent a password without pasting it on the chat

Описание и применение

AI‑агенту необходимо безопасно передать пароль, не раскрывая его в чате. Locked генерирует ссылку на защищённую форму, где пользователь вводит пароль, после чего агент использует его без отображения в чате.

Задача

AI agents need to provide passwords for login pages, but pasting secrets into chat is insecure and often blocked by the agent.

Результат

The agent can perform login actions without the password appearing in the chat, improving security while maintaining automation.

Рабочий процесс

• Install Locked with Bun: bun install -g github:BigSmallXYZ/locked locked setup
• Run locked request --label "GitHub login" --site github.com --login --reason "Sign in to merge PR #42"
• Open the provided link and enter the password in the form
• Choose how the agent should use the secret: locked inject, locked exec, locked panel, or locked phone send
• If the secret is highly sensitive, use --level sealed to require manual approval for each use

Доказательства

So I created Locked. Instead of you pasting the secret, the agent sends you a link. You open it, type the secret in a small form and the agent uses it. The value stays out of the chat.

Источник

The form needs to be reachable from your phone, and that's why you need a tunnel. It works with Cloudflare, ngrok, Tunnelmole or anything you already have.

Источник

If the secret is highly sensitive, use --level sealed to require manual approval for each use.

Источник