Detect, prevent, and remediate leaked credentials across codebases.
npx skills add https://github.com/JayRHa/AgentSkills --skill secrets-manager-jayrha
Please help me install this Agent Skill. Skill: secrets-manager Source: https://github.com/JayRHa/AgentSkills/tree/main/secrets-manager Command: npx skills add https://github.com/JayRHa/AgentSkills --skill secrets-manager-jayrha
Leaked credentials and mismanaged secrets present an active security risk; this skill helps you detect, prevent, and remediate secrets across codebases, configs, and CI/CD pipelines, while teaching best practices for safe secret handling.
Install secrets-manager in your project and run the built-in scanner to detect leaks, then apply the runbooks to remediate and rotate credentials.
High-intent search queries and answers about installing and using this skill.
To detect and remediate leaked credentials, you can run a secret scanner to identify hardcoded API keys and tokens, then apply runbooks to revoke, scrub history, and rotate the exposed secrets. This workflow ensures complete remediation.
Preventing hardcoded secrets from entering git history requires a pre-commit hook that enforces secret checks before commits are accepted. This stops leaked credentials like passwords and tokens from being committed into the repository.
Rotating exposed API keys and tokens after a leak involves following a remediation runbook that guides you through revoking the compromised credentials and generating new ones via vault or KMS integration.
Yes, you can secure .env file exposure in CI/CD pipelines by classifying the leaked secrets and applying secure storage workflows that inject credentials dynamically using workload identities rather than static files.
Yes, the workflow integrates with vault and KMS to securely store and rotate credentials using dynamic secrets and workload identities, ensuring that remediated credentials are managed safely after detection.
gaoqiongxieAudit codebases for OWASP Top 10 vulnerabilities and hardcoded secrets.
AcczdyGenerate dynamic HashiCorp Vault secrets for databases, AWS IAM, and PKI certificates.
arbazkhan971Detect exposed secrets and rotate credentials into secret managers.
jbovetScan code and configuration files for leaked credentials and tokens.
