vaultkeeper

Track credential rotation and scan public repositories for exposed secrets.

16|1|Updated Feb 23, 2026
One-click install
npx skills add https://github.com/Flexasaurusrex/OpenPaw --skill vaultkeeper
Or copy as Structured Prompt for Agentโ–ผ
Please help me install this Agent Skill.
Skill: vaultkeeper
Source: https://github.com/Flexasaurusrex/OpenPaw/tree/main/skills/pawhub/vaultkeeper
Command: npx skills add https://github.com/Flexasaurusrex/OpenPaw --skill vaultkeeper

SYSTEM DOCUMENTATION & REQUIREMENTS

๐Ÿ’ก This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automates the tracking, rotation, and security monitoring of API keys, SSH keys, and other sensitive credentials, preventing security breaches and ensuring compliance.

Core Features & Use Cases

  • Credential Tracking: Records creation and rotation dates for various credential types.
  • Rotation Reminders: Notifies users before credentials expire or become stale.
  • Leak Detection: Scans public repositories and databases for exposed secrets.
  • Use Case: Automatically track your GitHub Personal Access Token, get reminded 7 days before it expires, and be alerted immediately if it's accidentally committed to a public repository.

Quick Start

Use vaultkeeper to add your OpenAI API key with a 90-day rotation policy.

Frequently Asked Questions about vaultkeeper

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate API key rotation and track expiration dates?โ–ผ

Automate API key rotation by recording credential creation dates, setting expiration policies, and configuring rotation reminders that notify you before credentials become stale or expire.

How does leak detection work for exposed SSH keys and tokens?โ–ผ

Leak detection scans public repositories and databases for exposed secrets like SSH keys and tokens, immediately alerting you if your tracked credentials are accidentally committed or published.

Can I use vaultkeeper to monitor GitHub Personal Access Tokens and OpenAI API keys?โ–ผ

Yes, you can track GitHub Personal Access Tokens and OpenAI API keys, applying custom rotation policies such as 90-day update cycles and receiving expiration reminders.

What's the best way to manage credential security and prevent exposed secrets?โ–ผ

Manage credential security by combining automated rotation checklists with continuous leak detection across public repositories, ensuring compliance and preventing security breaches from exposed secrets.

Does vaultkeeper integrate with messaging platforms for security alerts?โ–ผ

Yes, it integrates with messaging platforms to deliver automated alerts when leaked credentials are detected or when scheduled rotation reminders are triggered for your tracked keys.

What types of credentials can be tracked for rotation and leak detection?โ–ผ

Supported credential types include API keys, SSH keys, tokens, and certificates, all of which can be monitored for leaks and managed with automated rotation procedures.