skills.rest
Khamel83
Khamel83COMMUNITY
Explore all skills by this author →
GitHub

secrets-vault-manager

Automate encrypted secret storage, decryption, and rotation with SOPS and Age.

Updated Nov 22, 2025
Search Tags:#encryption#secrets#environment-variables#sops#age#secret-management
One-click install
npx skills add https://github.com/Khamel83/oneshot --skill secrets-vault-manager
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: secrets-vault-manager
Source: https://github.com/Khamel83/oneshot/tree/main/archive/v9/skills/secrets-vault-manager
Command: npx skills add https://github.com/Khamel83/oneshot --skill secrets-vault-manager

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Encrypted secrets must be stored securely and rotated reliably across ONE_SHOT projects; this skill automates decryption, rotation, and organized storage using SOPS and Age to reduce manual risk.

Core Features & Use Cases

  • Secret lifecycle management: centralize encryption keys, decrypt into project environments, and rotate credentials with minimal downtime.
  • Per-project vaults: isolate secrets per project with controlled access and versioning.
  • Use Case: when a project needs to rotate API keys or add new credentials, this skill handles encryption, decryption, and updates consistently.

Quick Start

Install and configure SOPS + Age to securely manage secrets in your ONE_SHOT projects.

Frequently Asked Questions about secrets-vault-manager

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I manage encrypted secrets and environment variables for multiple projects?▼

You can manage encrypted secrets by using SOPS and Age to establish per-project vaults, ensuring isolated access and version control for environment variables. This skill automates decryption and rotation across repositories.

What is the best way to rotate API keys with minimal downtime?▼

Rotating API keys reliably requires automating the encryption and decryption lifecycle. This skill uses SOPS and Age to update credentials consistently across project environments, reducing manual risk and downtime.

Do I need SOPS and Age keys to manage environment variables in a Git repository?▼

Yes, securely managing secrets requires Age keys and SOPS configuration within a Git repository layout that includes a dedicated secrets folder for storing and decrypting environment variables.

How does SOPS with Age work for isolating project secrets?▼

SOPS with Age works by applying per-project vaults to isolate encrypted secrets with controlled access. It automates the decryption of environment variables into project environments while maintaining versioning.

Can I use this approach to centralize encryption keys for ONE_SHOT projects?▼

Yes, you can centralize encryption keys for ONE_SHOT projects. This skill handles the secret lifecycle by applying SOPS and Age configurations to securely store, decrypt, and rotate credentials.

Related Skills

Explore More Software Engineering Skills→
nq-rdlnq-rdl

sops

Encrypt and decrypt YAML, JSON, ENV, and INI secrets with SOPS.

Official
Advanced
MarbleSodasMarbleSodas

1password

Retrieve and inject 1Password secrets into Hermes command workflows.

Community
Intermediate
AnveioAnveio
1

task-pull-request

Automate GitHub pull request creation, reviews, feedback, and merges via gh CLI.

Community
Intermediate
ollieb89ollieb89

secrets-management

Manage CI/CD pipeline secrets with Vault or AWS Secrets Manager.

Community
Advanced