secret-inventory-audit

Audit GCP Secret Manager secrets for expiry, rotation health, and access hygiene.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/edri2or/project-life-132 --skill secret-inventory-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secret-inventory-audit
Source: https://github.com/edri2or/project-life-132/tree/main/exported-skills/secret-inventory-audit
Command: npx skills add https://github.com/edri2or/project-life-132 --skill secret-inventory-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Secrets drift and misconfigurations across cloud environments undermine security audits. This skill audits GCP Secret Manager secrets for expiry, rotation health, and access hygiene, producing an actionable inventory for governance.

Core Features & Use Cases

  • Enumerates all secrets in Secret Manager and reports on expiry, rotation cadence, and access controls.
  • Flags overdue or missing rotation policies to support compliance reviews and remediation planning.
  • Generates a structured inventory report suitable for security audits and governance reviews.

Quick Start

Run a secret inventory audit against your GCP project to generate the health report.

Frequently Asked Questions about secret-inventory-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I audit GCP Secret Manager secrets for rotation health and expiry gaps?

To audit GCP Secret Manager secrets, this skill enumerates all secrets, fetches version metadata, evaluates rotation cadence, and generates an inventory report with remediation guidance. It identifies expiry gaps and access hygiene issues for compliance reviews.

What is secret rotation health and why is it important for cloud compliance?

Secret rotation health is the practice of regularly updating secrets to prevent unauthorized access. It is critical for cloud compliance because missing or overdue rotation policies create security vulnerabilities that fail governance audits and increase breach risks.

How do I check for missing rotation policies across my GCP project secrets?

You can check for missing rotation policies by running an inventory audit against your GCP project. This skill flags overdue or absent rotation configurations and produces a structured health report detailing necessary remediation actions.

Can I use this secret audit for incident response and onboarding scenarios?

Yes, this secret audit supports incident response, onboarding, and periodic compliance reviews. It assesses access hygiene and expiry gaps across cloud environments, providing an actionable inventory report to guide security remediation during these scenarios.

Does this inventory audit assess access hygiene or just secret expiry?

This inventory audit assesses both access hygiene and secret expiry. It evaluates access controls, rotation cadence, and expiry gaps across GCP Secret Manager, generating a comprehensive structured report for security governance and remediation planning.