manage-secrets-env

What problem does it solve?

Opinionated defaults and full lifecycle playbook for secrets and environment variables. Decides where a secret or env-specific value lives (constant, .env, CI secret, env var), scaffolds .env.example and .gitignore, and manages the lifecycle end to end — add, update, rotate, remove, migrate between buckets, audit cross-environment drift, provision new environments. High-stakes companion to project-conventions. Language-agnostic.

Core Features & Use Cases

• Decide bucket for values (constant, .env, CI secret, env var) and when to migrate between them.
• Scaffold baseline configuration files (.env.example) and default ignore rules (.gitignore) to prevent secret leakage.
• Manage lifecycle end-to-end: add, update, rotate, remove, migrate, audit drift, and provision new environments.
• Audit cross-environment drift to ensure consistency and compliance.

Quick Start

Invoke the manage-secrets-env skill to scaffold a baseline environment and enforce end-to-end secret lifecycle across your project.