key-rotation

Rotate SSH keys, API keys, database passwords, and GitHub secrets across Strut VPS stacks.

1|Updated Apr 7, 2026
One-click install
npx skills add https://github.com/gfargo/strut --skill key-rotation
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: key-rotation
Source: https://github.com/gfargo/strut/tree/main/.kiro/skills/key-rotation
Command: npx skills add https://github.com/gfargo/strut --skill key-rotation

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Rotating and regenerating SSH keys, API keys, database passwords, GitHub secrets, and environment variables across Strut VPS stacks to maintain security and reduce exposure.

Core Features & Use Cases

  • Centralized rotation workflow: coordinates SSH keys, API keys, DB passwords, and environment variables across a stack.
  • Audit-ready: maintains metadata in keys/ and supports redeploys to apply changes.
  • Use Case: Respond to security incidents, onboarding/offboarding, or scheduled credential refreshes for multiple stacks.

Quick Start

Rotate all credentials for a given Strut stack by invoking the key-rotation workflow.

Frequently Asked Questions about key-rotation

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I rotate SSH keys and API credentials across a VPS stack?

Rotate SSH keys, API keys, database passwords, and environment variables by invoking a centralized workflow that updates metadata in the keys directory and synchronizes secrets across the stack. Optionally trigger redeploys or health checks to apply changes.

What is the best way to refresh database passwords and GitHub secrets during offboarding?

Refresh database passwords and GitHub secrets during offboarding through a multi-step rotation workflow that regenerates credentials, updates metadata, and optionally triggers redeploys to ensure access is revoked and synchronized.

Can I use this credential rotation workflow for incident response on Strut VPS stacks?

Yes, credential rotation is designed for incident response on Strut VPS stacks, allowing rapid regeneration of SSH keys, API keys, database passwords, and environment variables to reduce exposure and restore security.

How do I schedule environment variable and API key rotations for multiple stacks?

Schedule environment variable and API key rotations across multiple stacks by invoking the rotation workflow, which maintains audit-ready metadata and coordinates updates across SSH keys, database passwords, and GitHub secrets.

Does key rotation automatically trigger a redeploy and health check after updating secrets?

Key rotation optionally triggers redeploys and health checks after synchronizing updated secrets, ensuring the stack applies new credentials and remains operational following the rotation process.

What types of secrets and credentials can I rotate using this workflow?

Rotate SSH keys, API keys, database passwords, GitHub secrets, and environment variables using a multi-step workflow that updates metadata in the keys directory and synchronizes changes across the entire Strut VPS stack.