secrets-management

Name: secrets-management
Availability: InStock
Author: nima

Implement secure storage, runtime injection, and automated rotation for credentials.

25|3|Updated Jul 14, 2026

Search Tags:#devops #security #credentials #vault #leak detection #rotation

Ready to run

npx skills add https://github.com/nimadorostkar/Claude-Skills-collection --skill secrets-management-nimadorostkar

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/nimadorostkar/Claude-Skills-collection/tree/main/skills/security/secrets-management
Command: npx skills add https://github.com/nimadorostkar/Claude-Skills-collection --skill secrets-management-nimadorostkar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill eliminates the risk of hardcoded credentials and accidental exposure by providing a structured framework for secret storage, injection, and incident response.

Core Features & Use Cases

Secret Lifecycle Management: Implements best practices for storage, injection, and zero-downtime rotation of API keys and database credentials.
Leak Prevention & Detection: Provides workflows for scanning repository history and logs to identify and remediate exposed secrets.
Use Case: If you discover an AWS access key in your git history, use this skill to guide the immediate rotation, revocation, and audit process to minimize the blast radius.

Quick Start

Use the secrets-management skill to audit the current repository for exposed credentials and establish a secure runtime injection procedure.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I automate credential rotation for cloud infrastructure without downtime?▼

Automate credential rotation by implementing secure storage and runtime injection procedures. This approach satisfies zero-downtime rotation requirements for API keys and database credentials across cloud infrastructure and application configurations.

What is the best way to remove hardcoded credentials from application configuration and CI/CD pipelines?▼

Remove hardcoded credentials by implementing a structured framework for secret storage and runtime injection. This secures application configuration and CI/CD pipeline security by eliminating accidental exposure risks.

How do I scan git history for exposed secrets and remediate an AWS access key leak?▼

Scan repository history and logs to identify exposed secrets, then guide the immediate rotation, revocation, and audit process. This minimizes the blast radius of discovered AWS access keys or other leaked credentials.

Does this secrets lifecycle management process work for continuous leak detection across codebases?▼

Yes, the secrets lifecycle management process provides continuous leak detection across codebases and logs. It establishes workflows to identify and remediate exposed secrets within your development environment.

When do I need to implement secure runtime injection for API keys and database credentials?▼

Implement secure runtime injection when you need to eliminate hardcoded credentials from cloud infrastructure and application configurations. This process ensures secrets are securely stored and injected during execution rather than embedded in code.