Manage OpenBao secret resolution, token issuance, leases, rotation, and auditing.
npx skills add https://github.com/quarkloop/agent --skill secrets-quarkloop
Please help me install this Agent Skill. Skill: secrets Source: https://github.com/quarkloop/agent/tree/main/plugins/services/secrets Command: npx skills add https://github.com/quarkloop/agent --skill secrets-quarkloop
This Skill addresses the secure management of OpenBao-backed secret material, scoped secret tokens, lease lifecycle, rotation, and secret access audit, providing a boundary for agents to handle sensitive information.
Initialize a new session with the secret skill, and issue a scoped secret token.
High-intent search queries and answers about installing and using this skill.
To manage OpenBao secret lifecycle securely, this Skill handles secret resolution, scoped token issuance, lease management, and rotation. It provides explicit access boundaries for workflows handling sensitive credentials.
The best way to issue scoped tokens for OpenBao secret access is through this Skill's bounded token issuance feature. It generates purpose-specific tokens to safely resolve secret references without exposing broad administrative privileges.
You can rotate OpenBao secret values with administrative approval using this Skill's rotation capabilities. It ensures secure handling of sensitive information throughout the credential lifecycle while maintaining strict access boundaries.
Yes, you can renew and revoke OpenBao secret leases programmatically. This Skill directly manages the lease lifecycle, allowing workflows to automatically extend or terminate access to sensitive credentials as needed.
OpenBao secret management supports audit access through this Skill's redacted event recording feature. It logs access events for auditing purposes, ensuring secure tracking of sensitive credential usage within administrative workflows.
terrylicaValidate Doppler secrets and test authentication against target services.
RedHatProductSecurityImplement structured JSON logging for data access and security events.
FiventsValidate user membership and roles before performing organization-scoped actions.
balsm-healthAutomate generation, management, and rotation of dynamic secrets with HashiCorp Vault.
