R.I.S.K.S (Relatively Insecure System for Keys and Secrets) is a tool suite for creating, using and managing different online identities, centered around cryptographic autentication (GPG), communication (SSH) and password secrets (pass) and QubesOS, with an emphasis on seggregating and isolating these identities and their data.

The original idea and associated script can be found in the risks-scripts repository, along with the associated tutorials.

AppVM

This repository provides a CLI (risq) to be used in a client AppVM. This script depends on the vault risks CLI (provided here), for working correctly, since it also relies on identities that are used and managed in a vault VM.

Functionality includes:

• A wrapper around the qvm-pass program (dependency) to query password-store items from the vault.
• Completions for the CLI and the pass wrapper.
• A single CLI in which the functionality is bundled

Documentation

• Software used
• Installation
• Usage tutorial
• Additional workflows
• Command-line API
• Development