pass-secrets

Securely run commands that require secrets from the pass password store. Use this when a command needs API keys, tokens, passwords, or other credentials. Secrets are injected as environment variables and are NEVER visible in command output or logs.