# Keybook (ChatGPT Plugin)

> 按名称调用网站、发布、模型与 SSH 凭据

- Type: plugin
- Publisher: ailuntz
- Categories: Security
- Website: https://chatgpt.com/plugins/plugins_6ab477295a3081918fce6282c1273661
- Open in ChatGPT: https://chatgpt.com/plugins/plugins_6ab477295a3081918fce6282c1273661
- Version: 0.6.1
- Listed: 2026-10-15

## About

Keybook 是供本机已授权任务使用的凭据目录。首次使用时，告诉它你现有凭据 YAML 文件的绝对路径；它会在本地检查格式，只保存路径。以后无需反复粘贴密码或 API Key，直接让 AI 继续原任务即可。

需要登录网站时，可查找 web 分类中的用户名、邮箱、指定密码变体和 PIN；需要本机授权时，可分别查找 system 中的 macOS 登录密码或登录钥匙串密码。发布 npm 包、上传 Hugging Face 模型或数据集、推送 Docker 镜像、操作 GitHub/GitLab、部署 Cloudflare 时，可按名称查找 services 中对应的令牌。调用 OpenRouter、ModelScope 等模型 API 时，查找 llm 中的密钥；连接已授权的 SSH 主机时，查找 ssh 中的私钥文件路径。实际可用条目取决于你自己的 YAML，Keybook 不会假定某个服务已配置。

Keybook 先搜索条目名称，再用随包脚本把选定值注入可信目标程序的环境变量，并继续任务。list/search 只返回名称，get 始终遮盖值，run 隐藏子进程输出并只报告状态；不会在对话中展示明文。SSH 条目是文件路径，由目标程序传给 SSH 客户端。你自行维护本地 YAML；插件不会创建、加密或同步它，也不提供浏览器自动填充。需要本机终端与 Node.js 22+。

## Install

1. **Add it in ChatGPT** Open Plugins in the ChatGPT sidebar (web or desktop), search for “Keybook” and select +. You'll be asked to sign in to any connected service on first use. Then type @ in a chat to call it.

## Skills

- **configure-yaml**: Configure Keybook with the absolute path to an existing local credentials YAML file. Use when the user asks to set up or change the YAML path, or when a credential task finds Keybook uninitialized. Do not prompt merely because the plugin was installed.
- **keybook**: Use Keybook when an authorized task needs credentials from the user's local YAML file. Find website logins; macOS login or keychain passwords; npm, Hugging Face, Docker, GitHub/GitLab or Cloudflare tokens; model API keys such as OpenRouter or ModelScope; and SSH private-key paths. Search names and pass only the selected value to a trusted local process without printing it. Use before asking the user to paste a secret, and when the user asks which credential names are configured.

## Example prompts

- "配置 Keybook：请询问我现有凭据 YAML 的绝对路径，在本地检查格式，只保存路径。"
- "帮我完成已授权的 npm 发布；需要令牌时用 Keybook 查找并交给可信的发布命令。"
- "用 Keybook 查找这次 Cloudflare 部署或模型 API 调用所需的凭据，不要在对话中显示值。"

## Related

- [Codex Security](https://chatgptplugins.directory/plugins/codex-security.md): Security scanning for your codebase
- [Static Analysis (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-static-analysis.md): CodeQL, Semgrep and SARIF parsing skills for security bug hunting
- [Differential Review (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-differential-review.md): Security-focused review of code diffs with blast-radius estimation
- [Supply Chain Risk Auditor (Trail of Bits)](https://chatgptplugins.directory/plugins/trailofbits-supply-chain-risk-auditor.md): Audit npm, PyPI and Go dependencies for supply-chain risk
- [Aivana Security Investigator](https://chatgptplugins.directory/plugins/aivana-security-investigator.md): Run safe KQL investigations
- [Atbash Safety](https://chatgptplugins.directory/plugins/atbash-safety.md): Guard tool calls with Atbash

---
Source: https://chatgptplugins.directory/plugins/keybook · Index: https://chatgptplugins.directory/llms.txt · Independent and community-run. Not affiliated with or endorsed by OpenAI. ChatGPT is a trademark of OpenAI.