Ready to supercharge your AI agents?

Install any skill in seconds. Free to start, no credit card required.

CLI Keys · diegosouzapw | DecimalAI

diegosouzapw/cli-keys

SkillScore96Maintained

Create, list, rotate, and revoke OmniRoute API keys from the CLI. Manage OAuth flows for provider authentication and inspect key scopes and expiration.

DevOpsby diegosouzapw

Links this skill to your agents and keeps it current with the author’s updates.

Automatic

DevOps & SRE pack

1 · One-time — install the CLI (docs ↗)

pip install decimalai

2 · Get the skill — writes .claude/skills/diegosouzapw-cli-keys/SKILL.md

decimalai skills pull diegosouzapw-cli-keys --out .claude/skills/

No CLI? Get the same file — curl · raw file

curl -fsSL --create-dirs -o .claude/skills/diegosouzapw-cli-keys/SKILL.md https://app.decimal.ai/s/diegosouzapw-cli-keys/SKILL.md

Raw file: /s/diegosouzapw-cli-keys/SKILL.md ↗ · machine-readable summary at /s/diegosouzapw-cli-keys.json ↗

In productionGlobal

how this skill behaves on real traffic · last 30 days

No production data for this skill yet — usage numbers appear here once agents start running it.

Anonymized aggregate across every org using this skill — proof from real production use, not a demo.

Does this skill help? · Benchmark: with vs. withoutsign in to run this on your agents

24 test cases from the publisher’s eval.yaml · each run twice on gemini-3.6-flash — with the skill injected, then without · last run 29d ago

Yes — +79% lift-8% tokens0% turns96% of whole cases pass with skill (23/24)

Test case	Without → With	Effect	Δ tokens	Δ turns
case-01	✗→✓	▲ Improved	1%	0%
case-02	✗→✓	▲ Improved	-17%	0%
case-03	✗→✓	▲ Improved	17%	0%
case-04	✗→✓	▲ Improved	-23%	0%
case-05	✗→✓	▲ Improved	-19%	0%

Showing 5 of 24 cases

SkillSafety

✓ 3 of 3 passed

Code scan15 of 15 checks clean

0 critical · 0 warning · 0 info — scanner v4 — 8/3/2026

live_secretremote_code_executionreverse_shelldata_exfiltrationssrf_metadataagent_snoopinganti_refusaldestructive_commandsobfuscated_unicodeunicode_homoglyphopaque_blobsuspicious_urltool_overreachtrigger_abuseprompt_injection_phrasing

IntentSafe

LLM judge · does the skill do what it claims

ContentClean

LLM judge · policy & harmful-content review

Source

Imported

diegosouzapw / omniroute

skills/cli-keys/SKILL.md

View on GitHub ↗

License MITImported 8/3/2026Version v1

Skill contents

SKILL.md

Overview

Create, list, rotate, and revoke OmniRoute API keys from the CLI. Manage OAuth flows for provider authentication and inspect key scopes and expiration.

Quick install

bash
npm install -g omniroute   # or: npx omniroute
omniroute --version

Subcommands

`keys`

Example:

bash
omniroute keys

`keys add <provider> [apiKey]`

Flags:

--stdin

Example:

bash
omniroute keys add <provider> [apiKey]

`keys list`

Flags:

--json

Example:

bash
omniroute keys list

`keys remove <provider>`

Flags:

--yes

Example:

bash
omniroute keys remove <provider>

`keys regenerate <id>`

Flags:

--yes

Example:

bash
omniroute keys regenerate <id>

`keys revoke <id>`

Flags:

--yes

Example:

bash
omniroute keys revoke <id>

`keys reveal <id>`

Example:

bash
omniroute keys reveal <id>

`keys usage <id>`

Flags:

--limit <n>

Example:

bash
omniroute keys usage <id>

`keys policy`

Example:

bash
omniroute keys policy

`keys show <id>`

Example:

bash
omniroute keys show <id>

`keys set <id>`

Flags:

--rate-limit <n>
--max-cost <n>
--allowed-models <list>

Example:

bash
omniroute keys set <id>

`keys expiration`

Example:

bash
omniroute keys expiration

`keys list`

Flags:

--days <n>
--json

Example:

bash
omniroute keys list

`keys rotate <id>`

Flags:

--grace-period <ms>
--yes

Example:

bash
omniroute keys rotate <id>

`oauth`

Example:

bash
omniroute oauth

`oauth providers`

Example:

bash
omniroute oauth providers

`oauth start`

Flags:

--no-browser
--import-from-system
--social <s>
--timeout <ms>

Example:

bash
omniroute oauth start

`oauth status`

Flags:

--provider <id>

Example:

bash
omniroute oauth status

`oauth revoke`

Flags:

--connection-id <id>
--yes

Example:

bash
omniroute oauth revoke

Want to see if diegosouzapw/cli-keys would activate on your phrasing? Try it before you install — no LLM call, no signup.

Latest benchmark · publisher runVerified

8/7/2026, 13:51 UTC · 24 cases

Lift

+79%

96% vs 17%

Agent turns

1.0 vs 1.0

Tokens

-9%

1,093.5 vs 1,195.08

fail → pass · 20pass → pass · 3pass → fail · 1

Per-case results (24)

Case	Status	Duration (ms)			Turns			Tokens			Tool calls
Case	Status	Without	With	Δ	Without	With	Δ	Without	With	Δ	Without	With	Δ
case-22 How do I configure nginx to reverse proxy requests to a local OmniRoute server running on port 8080?	pass→pass	8,734	6,070	-31%	1	1	0%	1,723	1,915	+11%	0	0	—
case-01 I need to rotate an existing OmniRoute API key (ID: `key_8831`) non-interactively so it doesn't prompt for confirmation, while keeping a 5-minute transition window for the old key. What exact terminal command should I execute?	fail→pass	6,154	2,819	-54%	1	1	0%	1,297	1,314	+1%	0	0	—
case-02 What command should I run in my terminal to update key `key_1234` so that it restricts allowed models to `gpt-4o,claude-3-5-sonnet` and caps the maximum cost at 50?	fail→pass	6,316	1,760	-72%	1	1	0%	1,306	1,079	-17%	0	0	—
case-03 I am logged into a remote headless server and need to initiate an OmniRoute OAuth login session for Google without opening a desktop browser, setting a 2-minute timeout. Which command do I use?	fail→pass	5,890	5,613	-5%	1	1	0%	991	1,157	+17%	0	0	—
case-04 I want to add an OpenAI key into OmniRoute without exposing the secret string in my shell history or interactive process arguments. What CLI command and flag should I use?	fail→pass	8,601	2,304	-73%	1	1	0%	1,376	1,054	-23%	0	0	—
case-05 How can I dump all configured OmniRoute API keys in structured machine-readable JSON format for an automated shell script?	fail→pass	8,369	2,515	-70%	1	1	0%	1,401	1,137	-19%	0	0	—
case-06 I want to check OmniRoute API keys created or expiring within the last 30 days formatted as JSON. What command should I issue?	fail→pass	9,577	1,648	-83%	1	1	0%	1,678	946	-44%	0	0	—
case-07 I want to remove the provider configuration for Anthropic in OmniRoute via script without getting prompted for confirmation. Which command should I run?	fail→pass	3,745	1,909	-49%	1	1	0%	709	925	+30%	0	0	—
case-08 I need to regenerate an existing OmniRoute key with ID `key_99` non-interactively. What is the CLI command?	fail→pass	4,647	1,692	-64%	1	1	0%	814	926	+14%	0	0	—
case-23 How do I set the OPENAI_API_KEY environment variable in a Linux bash session so standard python libraries can access it directly?	pass→fail	7,578	5,295	-30%	1	1	0%	1,373	1,585	+15%	0	0	—
case-09 I need to immediately revoke key `key_55` in OmniRoute without interactive user prompts. What command does this?	fail→pass	4,729	1,576	-67%	1	1	0%	859	901	+5%	0	0	—
case-10 I want to view the raw unmasked secret string of OmniRoute key `key_42`. Which CLI command shows this value?	fail→pass	5,815	1,534	-74%	1	1	0%	926	928	+0%	0	0	—
case-11 I want to inspect recent usage logs for OmniRoute key `key_77`, limited to the last 20 entries. What command should I run?	fail→pass	5,865	1,286	-78%	1	1	0%	1,006	952	-5%	0	0	—
case-12 Which CLI command displays the system-wide key policy settings in OmniRoute?	fail→pass	6,413	1,468	-77%	1	1	0%	930	897	-4%	0	0	—
case-13 What command inspects the detailed metadata and configuration of key `key_101` in OmniRoute?	fail→pass	6,304	1,370	-78%	1	1	0%	1,056	929	-12%	0	0	—
case-14 I want to set a rate limit of 100 requests per minute on OmniRoute key `key_202`. What command updates this setting?	fail→pass	5,400	1,762	-67%	1	1	0%	1,135	1,007	-11%	0	0	—
case-15 Which command shows the expiration status across all keys in OmniRoute?	fail→pass	7,615	2,508	-67%	1	1	0%	1,198	1,140	-5%	0	0	—
case-16 I want to see which OAuth authentication providers are supported by OmniRoute. What command lists them?	fail→pass	9,524	1,121	-88%	1	1	0%	1,525	847	-44%	0	0	—
case-17 I want to start an OAuth flow in OmniRoute that imports credentials directly from local system storage for GitHub social login. What CLI command do I execute?	fail→pass	9,093	3,101	-66%	1	1	0%	1,434	973	-32%	0	0	—
case-18 How can I check the current OAuth connection status specifically for the `google` provider in OmniRoute?	fail→pass	8,936	1,537	-83%	1	1	0%	1,747	951	-46%	0	0	—
case-19 I want to revoke an active OAuth connection with ID `conn_456` in OmniRoute without being prompted for confirmation. What CLI command should I execute?	fail→pass	4,821	1,541	-68%	1	1	0%	891	966	+8%	0	0	—
case-20 What OmniRoute CLI command displays general OAuth status and available commands when run without subcommands?	pass→pass	3,680	1,783	-52%	1	1	0%	562	979	+74%	0	0	—
case-21 What is the basic OmniRoute command to view an overview of management actions for API keys?	fail→pass	5,018	1,421	-72%	1	1	0%	830	872	+5%	0	0	—
case-24 How do I generate an SSH key pair using ssh-keygen with ed25519 encryption for GitHub authentication?	pass→pass	8,831	5,584	-37%	1	1	0%	1,915	1,864	-3%	0	0	—

These cases were also screened by the skill’s intent / safety pass.See the Trust review ↗Reproduce this benchmark in Colab ↗

How this skill was measured

DecimalAI ran this skill against gemini-3.6-flash twice over the same eval suite — once with the skill loaded and once without — and compared the two runs case by case. 24 cases were attempted. The headline lift of +79 percentage points is the difference between those two pass rates over the 24 comparable cases. 1 case got worse with the skill loaded, and it is included in that figure.

Model measured: gemini-3.6-flash
Graded by: gemini-3.6-flash
Grading method: judged
Verification: verified
Pass rate without the skill: 16.7%
Pass rate with the skill: 95.8%
Cases attempted: 24
Cases counted toward lift: 24
Cases that regressed: 1
Skill version measured: v1
Run completed: 8/7/2026, 13:51 UTC

Measured example — same prompt, with vs. without the skill · from the benchmark run · case case-01

Prompt

I need to rotate an existing OmniRoute API key (ID: `key_8831`) non-interactively so it doesn't prompt for confirmation, while keeping a 5-minute transition window for the old key. What exact terminal command should I execute?

Without the skill loaded, the model failed this case. With it loaded, the same prompt on the same model passed. This is one improved case from the latest verified run; every case, including any that regressed, is in the table above.

Show both answers

SkillScore blends 4 signals1 of 4 complete

BenchmarkPass rate WITH skill on a verified run96

Live evalNeeds ≥20 evaluated traces in 30 days

AI ratingNeeds ≥10 rated traces

AdoptionNeeds ≥10 serves across ≥2 orgs in 30 days

Efficiency · separate axis (at equal correctness)+0% turns+13% tokens

Shown for transparency; not credited unless a verified run shows no correctness regression.

Backed by 1 of 4 signals — each added signal makes the score more robust.

Verified on gemini-3.6-flash · re-tested 28 days ago

Other measured skills in the registry, with their headline benchmark lift.

Ready to supercharge your AI agents?

diegosouzapw/cli-keys

SkillSafety

Source

Overview

Quick install

Subcommands

keys

keys add <provider> [apiKey]

keys list

keys remove <provider>

keys regenerate <id>

keys revoke <id>

keys reveal <id>

keys usage <id>

keys policy

keys show <id>

keys set <id>

keys expiration

keys list

keys rotate <id>

oauth

oauth providers

oauth start

oauth status

oauth revoke

How this skill was measured

Measured example — same prompt, with vs. without the skill · from the benchmark run · case case-01

Related skills

`keys`

`keys add <provider> [apiKey]`

`keys list`

`keys remove <provider>`

`keys regenerate <id>`

`keys revoke <id>`

`keys reveal <id>`

`keys usage <id>`

`keys policy`

`keys show <id>`

`keys set <id>`

`keys expiration`

`keys list`

`keys rotate <id>`

`oauth`

`oauth providers`

`oauth start`

`oauth status`

`oauth revoke`