Agent skill · security · aiskillstore
secrets-management
Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.
Why this skill is useful
Provides specific commands and integration patterns for managing secrets in CI/CD pipelines using Vault and AWS Secrets Manager that the AI wouldn't reliably generate on its own.
What it needs
Requires aws-cli, vault installed locally. Requires aws account access. About 4k tokens when loaded. Last updated 2026-08-07. 405 stars on the source repository.
What this skill does
Secrets Management Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools. Purpose Implement secure secrets management in CI/CD pipelines without hardcoding sensitive information. Use this skill when Store API keys and credentials Manage database passwords Handle TLS certificates Rotate secrets automatically Implement least-privilege access Do not use this skill when You plan to hardcode secrets in source control You cannot secure access to the secrets backend You only need local development values without sharing Instructions 1. Identify secret types, owners, and rotation requirements. 2. Choose a secrets backend and access model. 3. Integrate CI/CD or runtime retrieval with least privilege. 4. Validate rotation and audit logging. Safety Never commit secrets to source control. Limit access and log secret usage for auditing. Secrets Management Tools HashiCorp Vault Centralized secrets management Dynamic secrets generation Secret rotation Audit logging Fine-grained access control AWS Secrets Manager AWS-native solution Automatic rotation Integration with RDS CloudFormation support Azure Key Vault Azure-native solution HSM-backed keys Certificate management RBAC integration Google Secret Manager GCP-native solution Versioning IAM integration HashiCorp Vault Integration Setup Vault GitHub Actions with Vault GitLab CI with Vault Reference: See references/vault-setup.md AWS Secrets Manager Store Secret Retrieve in GitHub Actions Terraform with AWS Secrets Manager GitHub Secrets Organization/Repository Secrets Environment Secrets Reference: See references/github-secrets.md GitLab CI/CD Variables Project Variables Protected and Masked Variables Protected: Only available in protected branches Masked: Hidden in job logs File type: Stored as file Best Practices 1. Never commit secrets to Git 2. Use different secrets per environment 3. Rotate secrets regularly 4. Implement least-privilege access 5. Enable audit logging 6. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aiskillstore/secrets-management