Enforce safe secret loading, logging, error handling, storage, and rotation.
npx skills add https://github.com/f4rkh4d/forge-skill --skill forge-secrets
Please help me install this Agent Skill. Skill: forge-secrets Source: https://github.com/f4rkh4d/forge-skill/tree/main/skills/security/forge-secrets Command: npx skills add https://github.com/f4rkh4d/forge-skill --skill forge-secrets
This skill prevents accidental exposure of API keys, passwords, tokens, and other credentials by enforcing safe loading, logging, error handling, storage, and rotation practices that stop the most common leak paths.
Instruct your AI coding agent to add environment-based secret loading with startup validation, configure logger redaction for secret-like fields, and ensure production responses never return stack traces or raw error messages, using forge-secrets as the checklist for any code that touches keys, tokens, passwords, or session secrets.
High-intent search queries and answers about installing and using this skill.
Prevent secret leaks by enforcing log redaction for secret-bearing fields, ensuring raw error objects and stack traces are never returned to clients, and using client-safe error mapping for all responses.
Fail-fast environment validation checks required environment variables at boot via schema validation, crashing the service immediately instead of running with missing or unsafe configuration.
Securely store secrets by hashing API tokens at rest, encrypting data using AEAD, and hashing passwords with argon2id or bcrypt rather than SHA-1, MD5, or SHA-256.
Rotate signing keys without downtime by following documented procedures that include dual-key grace periods, allowing simultaneous validation of both old and new secrets during the transition.
Yes, it applies to backend and web services handling API keys, OAuth tokens, and session secrets, enforcing safe transport by rejecting bearer tokens in query strings and scanning code via a verifier.
constellizeValidate dependencies, configuration, environment variables, and business rules at startup.
AmidVoshakulIntegrate HashiCorp Vault and AWS Secrets Manager for CI/CD secret retrieval.
valentinmatheyStandardize Express error handling with custom classes and sanitized client responses.
s4kr4Write Python code with type hints, docstrings, and PEP 8 compliance.
