fleet-secret-custodian

Manage Azure Key Vault secret lifecycles with autonomous key rotation and tamper-evident audit logging.

Updated May 30, 2026
One-click install
npx skills add https://github.com/InnerScopeHearing/otchealth-claude-tools --skill fleet-secret-custodian
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: fleet-secret-custodian
Source: https://github.com/InnerScopeHearing/otchealth-claude-tools/tree/main/skills/fleet-secret-custodian
Command: npx skills add https://github.com/InnerScopeHearing/otchealth-claude-tools --skill fleet-secret-custodian

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill autonomously manages the lifecycle of secrets within the OTCHealth fleet, ensuring secure access and rotation of critical credentials.

Core Features & Use Cases

  • Secret Lifecycle Management: Enumerates, classifies, and audits all secrets in Azure Key Vault.
  • Autonomous Rotation: Rotates Azure-native keys based on age thresholds, without manual intervention.
  • Tamper-Evident Logging: Maintains a secure, hash-chained log of all actions to prevent tampering.
  • Use Case: For a company with a large number of secrets, this Skill can significantly reduce the risk of credential compromise and ensure compliance with security policies.

Quick Start

Run the 'audit' command to start the secret lifecycle audit process.

Frequently Asked Questions about fleet-secret-custodian

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate Azure Key Vault key rotation for enterprise environments?

Automating Azure Key Vault key rotation requires a tool that applies age thresholds to autonomously rotate Azure-native keys without manual intervention. This ensures secure access and compliance for enterprise environments.

What is a tamper-evident audit log for secret management?

A tamper-evident audit log for secret management is a hash-chained record of all actions performed on credentials. It prevents unauthorized alterations by cryptographically linking each log entry to ensure security compliance.

Do I need Azure Storage and Azure Identity permissions to manage secrets?

Yes, managing secrets in this enterprise context requires Azure Storage and Azure Identity permissions alongside Azure Key Vault access. These permissions enable secure enumeration, classification, and autonomous rotation of credentials.

How do I audit all secrets in Azure Key Vault?

Auditing secrets in Azure Key Vault involves running a lifecycle audit command to enumerate, classify, and record all stored credentials. This process maintains a tamper-evident log to ensure compliance with security policies.

What's the best way to ensure security compliance for secret lifecycle management?

Ensuring security compliance for secret lifecycle management requires automating key rotation and maintaining tamper-evident audit logs. This approach reduces the risk of credential compromise in large enterprise fleets.

Can I use autonomous key rotation without manual intervention in Azure Key Vault?

Yes, autonomous key rotation in Azure Key Vault can operate without manual intervention by applying age thresholds to Azure-native keys. This ensures credentials are rotated automatically when they expire.