skills.rest
ray-manaloto
ray-manalotoOFFICIAL
Explore all skills by this author →
GitHub

mise-ai-cli-keys

Secure AI CLI keys with threat modeling and storage practices.

1|1|Updated Apr 8, 2026
Search Tags:#security#pre-commit#threat-modeling#secret-management#key-rotation#ai-cli-keys
One-click install
npx skills add https://github.com/ray-manaloto/claude-code-marketplace --skill mise-ai-cli-keys
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: mise-ai-cli-keys
Source: https://github.com/ray-manaloto/claude-code-marketplace/tree/main/mise-toolkit/skills/mise-ai-cli-keys
Command: npx skills add https://github.com/ray-manaloto/claude-code-marketplace --skill mise-ai-cli-keys

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Security-focused guidance for AI API keys, addressing risk of leakage through git, logs, and demos, and outlining safe storage, rotation, and detection practices.

Core Features & Use Cases

  • Threat modeling for AI API keys and risk ranking across environments.
  • Safe storage options and recommended workflows for personal and team use (macOS Keychain, 1Password CLI, pass, GNOME libsecret, Doppler/Infisical/Vault, AWS Secrets Manager).
  • Key rotation cadences and incident response guidance.
  • Detection and redaction strategies to reduce accidental exposure and enforce guardrails (pre-commit and policies).

Quick Start

Enable a secure key workflow by configuring a secret manager and applying the recommended rotation cadence.

Frequently Asked Questions about mise-ai-cli-keys

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I secure AI CLI keys against accidental leakage in git and logs?▼

Secure AI CLI keys by applying threat modeling, safe storage practices, and pre-commit guardrails to prevent accidental exposure through git commits, logs, and demos. This approach combines secret managers with leak-detection workflows to enforce safe handling.

What is threat modeling for AI API keys and how does it rank risks?▼

Threat modeling for AI API keys identifies and ranks leakage risks across local development, CI pipelines, and demos. It provides concrete requirements for frontmatter discovery and enforces guardrails to secure key handling in Claude Code environments.

How do I set up key rotation policies and incident response for AI provider keys?▼

Set up key rotation policies by configuring a secret manager and applying recommended rotation cadences tailored to your environment. The skill guides incident response workflows and redaction strategies to reduce accidental exposure.

Does this approach work with secret managers like 1Password CLI, Doppler, or AWS Secrets Manager?▼

Yes, the secure key workflow supports 1Password CLI, Doppler, AWS Secrets Manager, pass, and macOS Keychain. It provides recommended storage options and workflows for both personal and team use across these platforms.

What's the best way to detect and redact exposed AI API keys in CI pipelines?▼

The best way to detect exposed AI API keys is implementing pre-commit hooks and detection policies within CI pipelines. These guardrails enforce redaction strategies and prevent accidental key exposure before deployment.

Related Skills

Explore More Software Engineering Skills→
TheBushidoCollectiveTheBushidoCollective
187

fnox-providers

Configure Fnox providers for encryption and secret storage across environments.

Official
Advanced
nimadorostkarnimadorostkar
25

secrets-management

Implement secure storage, runtime injection, and automated rotation for credentials.

Community
Advanced
Tonybleything76Tonybleything76

Env & Secrets Manager

Manage environment variables and secrets across application lifecycles.

Community
Advanced
giuseppe-trisciuogliogiuseppe-trisciuoglio
322

aws-sdk-java-v2-secrets-manager

Store and retrieve AWS Secrets Manager secrets using the Java SDK 2.x.

Community
Intermediate