Results for “secret-management”

Deploys and configures Delinea Secret Server for privileged access management, including secret vault setup, role-based access policies, automated password rotation, session recording, and Active Directory integration.

Store, retrieve, and manage secrets in Azure Key Vault using the official Rust SDK.

Secure Quarkus applications with authentication, authorization, input validation, and secrets management best practices.

Manage secrets and keys in Azure Key Vault using the JavaScript SDK, including CRUD operations, cryptographic functions, backup/restore, and key rotation.

Provides best practices for implementing authentication, authorization, input validation, CSRF protection, secrets management, rate limiting, and dependency security in Spring Boot services.

Manages SST applications by discovering project config, checking stack status, and inspecting bound resources. Supports deployment, live Lambda debugging, secret management, and multi-stage environments.

Manage cryptographic keys and secrets in Azure Key Vault using the @azure/keyvault-keys and @azure/keyvault-secrets SDKs for TypeScript.

Provides storage and environment conventions for NeMo-RL agents on Brev instances, ensuring large experiment outputs go to /ephemeral and secrets are loaded from .env.

Manage environment variables and secrets in Claude Code sessions without exposing their values to logs, diffs, or context.

Provides a comprehensive security checklist and code patterns for authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, and sensitive data exposure.

Manage production secret infrastructure with HashiCorp Vault, cloud secret stores, automated rotation, and audit logging.

Provides a security checklist and code patterns for authentication, input validation, secrets management, SQL injection prevention, XSS, CSRF, rate limiting, and sensitive data handling.

Use this when reviewing or designing how secrets, API keys, service credentials, signing keys, tokens, and environment-specific credentials are stored, loaded, rotated, and kept out of untrusted runtimes.

Configure and manage GitHub secret scanning, push protection, custom patterns, and alert remediation.

Audit environment-variable hygiene and secrets safety across local development and production with practical scanning, drift awareness, and rotation readiness.

Env & Secrets Manager

Detect and prevent hardcoded secrets in git repositories using Gitleaks, including pre-commit hooks, CI/CD integration, custom rules, baseline management, and remediation workflows.

Store, retrieve, and automatically rotate credentials, API keys, and other secrets using AWS Secrets Manager.

The central pattern.

Env & Secrets Manager

Persists app data on Android using Room, SQLite, SharedPreferences, DataStore, and encryption.

Manage, inventory, standardize, migrate, and test reusable Codex skills for the MetaSkill repository. Use when Codex needs to inspect local skills, convert a personal workflow into a public skill candidate, normalize skill folder shape, plan skill promotion, or decide whether a skill belongs in skill-management, publication-review, or skill-examples.

明楼（谍战虚构）认知与表达框架（压缩蒸馏）：三面间谍、辞令层叠、亲情作人质 触发：伪装者 等。禁止间谍违法教程

Manage environment variables securely by validating schemas, masking sensitive values, and preventing secret exposure in logs or agent context.

Use this skill for secret inventory, env vars, rotation plans, safe dev/prod separation, leak response. Trigger when the task involves security work related to Secrets Env Rotation, implementation, audits, debugging, strategy, or validation.

Audit the working tree and git history for exposed credentials and mis-scoped keys, then a rotate-vs-relocate plan. Use when "hardcoded secrets", "did I commit a key", "secret scan", "is my .env safe", or "rotate keys". Do not fire for "RLS audit" or generic "security burndown".

Use when working with API keys, credentials, tokens, certificates, or any sensitive configuration. This skill provides procedures for securely handling secrets throughout their lifecycle - from identification to storage, usage, rotation, and revocation.

Manage and analyze SOPS-encrypted secret files, including key rotation, multi-provider encryption, and file-based secret operations. Covers encrypting and decrypting files, managing encryption keys (AWS KMS, GCP KMS, Azure Key Vault, PGP), auditing encrypted files, and comparing secret structures.

Reviews secrets, config defaults, environment variables, logs, credentials, CI secrets, and unsafe settings.

Stores verified cross-session facts, decisions, preferences, and open questions without secrets, speculation, or monitoring.