Agent skill · security · aj-geddes
secrets-rotation
Implement automated secrets rotation for API keys, credentials, certificates, and encryption keys. Use when managing secrets lifecycle, compliance requirements, or security hardening.
Why this skill is useful
Provides specific implementation patterns for automated secrets rotation that the AI wouldn't reliably generate on its own.
What it needs
Requires aws-sdk installed locally. Requires aws account access. About 1k tokens when loaded. Last updated 2026-03-04. 307 stars on the source repository.
What this skill does
Secrets Rotation Table of Contents Overview When to Use Quick Start Reference Guides Best Practices Overview Implement automated secrets rotation strategy for credentials, API keys, certificates, and encryption keys with zero-downtime deployment and comprehensive audit logging. When to Use API key management Database credentials TLS/SSL certificates Encryption key rotation Compliance requirements Security incident response Service account management Quick Start Minimal working example: Reference Guides Detailed implementations in the references/ directory: Guide Contents --- --- Node.js Secrets Manager with Rotation Node.js Secrets Manager with Rotation Python Secrets Rotation with Vault Python Secrets Rotation with Vault Kubernetes Secrets Rotation Kubernetes Secrets Rotation Best Practices ✅ DO Automate rotation Use grace periods Verify new secrets Maintain rotation audit trail Implement rollback procedures Monitor rotation failures Use managed services (AWS Secrets Manager) Test rotation procedures ❌ DON'T Hardcode secrets Share secrets Skip verification Rotate without grace period Ignore rotation failures Store secrets in version control
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills aj-geddes/secrets-rotation