skills.rest
Harshal1841A
Harshal1841ACOMMUNITY
Explore all skills by this author →
GitHub

env-secrets-manager

Audit repositories for exposed secrets and guide environment variable management.

Updated Apr 3, 2026
Search Tags:#security#audit#DevOps#environment#secrets#rotation
One-click install
npx skills add https://github.com/Harshal1841A/Forge-RL --skill env-secrets-manager-harshal1841a
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: env-secrets-manager
Source: https://github.com/Harshal1841A/Forge-RL/tree/main/.claude/skills/env-secrets-manager
Command: npx skills add https://github.com/Harshal1841A/Forge-RL --skill env-secrets-manager-harshal1841a

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires scripts/env_auditor.py, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Managing environment variables and sensitive secrets consistently and safely is challenging, risking leaks or misconfigurations.

Core Features & Use Cases

  • Secrets Leak Detection: Identify hardcoded or exposed secrets in repositories.
  • Env Lifecycle Guidance: Offer best practices for .env and .env.example management.
  • Operational Pointers: Provide strategies for secret rotation and containment.
  • Use Case: Automate secret auditing during development and security audits to improve security posture.

Quick Start

Run a security scan on your repository with the env auditor script to identify secret leaks and improve your environment hygiene.

Frequently Asked Questions about env-secrets-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect hardcoded secrets and environment variable leaks in my repository?▼

Detect hardcoded secrets and environment variable leaks by running the custom env auditor script to scan your repository. This identifies exposed secrets and improves environment hygiene during security audits.

What are the best practices for managing .env and .env.example files in development?▼

Best practices for managing .env and .env.example files include keeping sensitive data out of version control and maintaining sanitized examples. The Skill provides lifecycle guidance to enforce these secure DevOps processes.

How can I automate secret rotation workflows across development and production environments?▼

Automate secret rotation workflows across development and production environments by following the Skill's operational pointers. It assists with secret rotation strategies and containment to maintain security posture.

Does the environment secrets auditor work for both development and production security audits?▼

The environment secrets auditor works for both development and production security audits. It guides best practices and audits leaks to promote secure DevOps processes across your entire workflow.

Why should I use a dedicated secrets management tool instead of manually checking environment variables?▼

Use a dedicated secrets management tool instead of manual checks to prevent misconfigurations and risks. It automates secret auditing and leak detection, ensuring consistent safety that manual reviews easily miss.

Related Skills

Explore More Software Engineering Skills→
xlelibertyxleliberty

env-secrets-manager

Audit local repositories for hardcoded credentials using regex pattern matching.

Community
Advanced
the-agency-aithe-agency-ai
39

Secret Management

Manage secret storage, retrieval, and rotation across multiple providers.

Official
Intermediate
zhangzhang-111-izhangzhang-111-i
2

env-secrets-manager

Scan repositories for environment variable and secret leaks.

Community
Intermediate
Camilo8902Camilo8902

env-secrets-manager

Manage environment variables and secrets with encryption, rotation, and provider integration.

Community
Advanced