skills.rest
nimadorostkar
nimadorostkarCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

secrets-management

Implement secure storage, runtime injection, and automated rotation for credentials.

25|3|Updated Jul 14, 2026
Search Tags:#devops#security#credentials#vault#leak detection#rotation
One-click install
npx skills add https://github.com/nimadorostkar/Claude-Skills-collection --skill secrets-management-nimadorostkar
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/nimadorostkar/Claude-Skills-collection/tree/main/skills/security/secrets-management
Command: npx skills add https://github.com/nimadorostkar/Claude-Skills-collection --skill secrets-management-nimadorostkar

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill eliminates the risk of hardcoded credentials and accidental exposure by providing a structured framework for secret storage, injection, and incident response.

Core Features & Use Cases

  • Secret Lifecycle Management: Implements best practices for storage, injection, and zero-downtime rotation of API keys and database credentials.
  • Leak Prevention & Detection: Provides workflows for scanning repository history and logs to identify and remediate exposed secrets.
  • Use Case: If you discover an AWS access key in your git history, use this skill to guide the immediate rotation, revocation, and audit process to minimize the blast radius.

Quick Start

Use the secrets-management skill to audit the current repository for exposed credentials and establish a secure runtime injection procedure.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate credential rotation for cloud infrastructure without downtime?▼

Automate credential rotation by implementing secure storage and runtime injection procedures. This approach satisfies zero-downtime rotation requirements for API keys and database credentials across cloud infrastructure and application configurations.

What is the best way to remove hardcoded credentials from application configuration and CI/CD pipelines?▼

Remove hardcoded credentials by implementing a structured framework for secret storage and runtime injection. This secures application configuration and CI/CD pipeline security by eliminating accidental exposure risks.

How do I scan git history for exposed secrets and remediate an AWS access key leak?▼

Scan repository history and logs to identify exposed secrets, then guide the immediate rotation, revocation, and audit process. This minimizes the blast radius of discovered AWS access keys or other leaked credentials.

Does this secrets lifecycle management process work for continuous leak detection across codebases?▼

Yes, the secrets lifecycle management process provides continuous leak detection across codebases and logs. It establishes workflows to identify and remediate exposed secrets within your development environment.

When do I need to implement secure runtime injection for API keys and database credentials?▼

Implement secure runtime injection when you need to eliminate hardcoded credentials from cloud infrastructure and application configurations. This process ensures secrets are securely stored and injected during execution rather than embedded in code.

Related Skills

Explore More Software Engineering Skills→
indoor47indoor47
9

security-audit

Audit codebases for OWASP Top 10 vulnerabilities, misconfigurations, and exposed secrets.

Community
Advanced
arbazkhan971arbazkhan971
26

secrets

Detect exposed secrets and rotate credentials into secret managers.

Community
Advanced
MOODMNKY-LLCMOODMNKY-LLC

1password

Automate 1Password CLI authentication and inject credentials into developer workflows.

Community
Intermediate
jg-chalk-iojg-chalk-io

moai-security-secrets

Manage secure secret storage, rotation, and distribution across services.

Community
Advanced