manage-secrets

Audit, sync, verify, and push secrets across GitHub Actions, Kubernetes, and local environments.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/declanshanaghy/fenrir-ledger --skill manage-secrets-declanshanaghy
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: manage-secrets
Source: https://github.com/declanshanaghy/fenrir-ledger/tree/main/.claude/skills/manage-secrets
Command: npx skills add https://github.com/declanshanaghy/fenrir-ledger --skill manage-secrets-declanshanaghy

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Audit, sync, verify, and push secrets across environments to prevent manual secret handling and drift in Fenrir Ledger.

Core Features & Use Cases

  • Audit all secrets across local env, GitHub, and Kubernetes to identify missing or stale values.
  • Sync missing or updated secrets to the correct destinations (GitHub Actions, fenrir-app-secrets, agent-secrets, n8n-secrets).
  • Verify deployed secrets match local values and push changes with controlled restarts when needed.
  • Use case: rotate API keys, fix expired credentials, and ensure consistent secret state during deployments.

Quick Start

Run /manage-secrets to audit all secrets, then run /manage-secrets sync to push missing values.

Frequently Asked Questions about manage-secrets

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I sync environment secrets across GitHub Actions and Kubernetes?

To sync environment secrets across GitHub Actions and Kubernetes, you can audit local .env files and push missing or updated values to the correct destinations. This prevents manual secret handling and configuration drift across deployments.

What is the best way to audit stale API keys and tokens across local and cloud environments?

Auditing stale API keys and tokens involves scanning local environment files, GitHub secrets, and Kubernetes secrets to identify missing or outdated values. This process ensures consistent credential states and highlights expired tokens requiring rotation.

How do I rotate API keys without causing deployment drift?

Rotating API keys without deployment drift requires syncing the updated credentials across local .env files, GitHub Actions, and Kubernetes secrets. You can then verify deployed secrets match local values and apply controlled restarts if needed.

Can I verify that deployed Kubernetes secrets match my local environment files?

Yes, you can verify that deployed Kubernetes secrets match your local environment files. The verification process checks deployed secrets against local values and pushes changes with controlled restarts to correct any mismatches.

How do I prevent unsafe changes when managing local .env files and GitHub secrets?

Preventing unsafe changes when managing local .env files and GitHub secrets requires maintaining automated guardrails during sync operations. These guardrails secure .env.local and .secrets files and block unauthorized or unsafe secret modifications.

Why do I need to sync secrets for Fenrir Ledger workflows?

You need to sync secrets for Fenrir Ledger workflows to prevent manual secret handling and drift across environments. It ensures API keys, tokens, and credentials remain consistent across GitHub Actions, Kubernetes, and local environment files.