Manage secrets safely: detect them in code/config/logs, vault them, federate with short-lived credentials, rotate on a schedule, and treat any committed secret as compromised (rotate, don't just delete).
Scanned 9/23/2026
Skills Directorynpx -y skills add mcorbett51090/RavenClaude --skill secrets-management --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Secrets Management?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/mcorbett51090-secrets-management)More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.
---
name: secrets-management
description: "Manage secrets safely: detect them in code/config/logs, vault them, federate with short-lived credentials, rotate on a schedule, and treat any committed secret as compromised (rotate, don't just delete)."
---
# Secrets Management
**Purpose:** keep secrets out of code and short-lived.
## Detect
Secret scanning in CI + pre-commit. Scan code, config, **and logs**.
## Store & federate
- Secrets in a **manager/vault**, referenced at runtime.
- Prefer **OIDC/workload-identity** short-lived credentials over long-lived keys.
## Rotate
On a schedule and on personnel change. A committed secret is **compromised** — rotate it, deleting the commit is not enough (it's in history + clones).
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
