secrets-management

Integrate external secret stores into CI/CD pipelines for credential management.

1|1|Updated Feb 15, 2026
One-click install
npx skills add https://github.com/yunseo-kim/agent-toolbox --skill secrets-management-yunseo-kim
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secrets-management
Source: https://github.com/yunseo-kim/agent-toolbox/tree/main/.agents/skills/secrets-management
Command: npx skills add https://github.com/yunseo-kim/agent-toolbox --skill secrets-management-yunseo-kim

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill addresses the critical need to manage sensitive credentials and secrets within CI/CD pipelines, preventing hardcoding and reducing security risks.

Core Features & Use Cases

  • Centralized Secret Storage: Integrates with tools like HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager.
  • Secure Credential Handling: Provides examples for securely injecting secrets into GitHub Actions and GitLab CI.
  • Use Case: Securely store API keys and database passwords for your deployment pipeline, ensuring they are never exposed in your codebase or logs.

Quick Start

Use the secrets-management skill to securely store and retrieve database credentials for your CI/CD pipeline.

Frequently Asked Questions about secrets-management

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I securely manage secrets in a CI/CD pipeline?

To securely manage CI/CD secrets, you can integrate your pipeline with external secret stores like HashiCorp Vault or AWS Secrets Manager to inject sensitive credentials without hardcoding them.

What is the best way to prevent secrets from being exposed in GitHub Actions logs?

The best way to prevent secret exposure in GitHub Actions is by using native platform variable management combined with external secret stores to securely inject credentials and mask them in logs.

How do I retrieve database credentials from AWS Secrets Manager during deployment?

You can retrieve database credentials during deployment by integrating your CI/CD pipeline with AWS Secrets Manager, which centrally stores and securely injects sensitive data into your deployment environment.

Can I use HashiCorp Vault with GitLab CI for rotating secrets?

Yes, you can integrate HashiCorp Vault with GitLab CI to handle rotating secrets and securely inject sensitive credentials into your pipeline without exposing them in your codebase.

Does this approach work with Azure Key Vault and Google Secret Manager?

Yes, this secrets management approach supports centralized secret storage across multiple platforms, including Azure Key Vault and Google Secret Manager, for secure credential handling in your pipelines.