Agent skill · security · borghei
secrets-vault-manager
This skill should be used when the user asks to "generate Vault configurations", "plan secret rotation", "analyze vault audit logs", "manage secrets lifecycle", or "set up HashiCorp Vault".
Why this skill is useful
Adds 3 executable scripts for managing HashiCorp Vault configurations, secret rotation, and audit log analysis that aren't in public docs.
What it needs
Requires python installed locally. About 2k tokens when loaded. Last updated 2026-07-21. 462 stars on the source repository.
What this skill does
Secrets Vault Manager Category: Engineering Domain: Secrets Management & Security Overview The Secrets Vault Manager skill provides tools for generating HashiCorp Vault configurations, planning and scheduling secret rotation cycles, and analyzing vault audit logs for suspicious access patterns. Essential for teams managing secrets at scale. Clarify First Before generating configs or plans, confirm these inputs. If any is unknown or vague, ASK — do not assume: [ ] Task — config generation / rotation planning / audit-log analysis (selects the script and the entire workflow) [ ] Environment & secrets engines — e.g. production + kv/database/transit (--env, --secrets-engines; shapes the generated HCL) [ ] Secrets inventory & classification — Critical/High/Medium/Low per secret (drives rotation frequencies and the schedule) Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact. Quick Start Tools Overview Tool Purpose Key Flags ------ --------- ----------- vaultconfiggenerator.py Generate HashiCorp Vault configurations --env, --secrets-engines, --auth-methods rotationplanner.py Plan and schedule secret rotation cycles --inventory, --policy, --format auditloganalyzer.py Analyze vault audit logs for anomalies --log-file, --time-range, --format Workflows Initial Vault Setup 1. Define environment and required secrets engines 2. Run vaultconfiggenerator.py to generate HCL configs 3. Review and customize generated configurations 4. Apply via Terraform or Vault CLI Secret Rotation Planning 1. Create secrets inventory (JSON) 2. Run rotationplanner.py to generate schedule 3. Review rotation plan and adjust frequencies 4. Implement automated rotation where possible Audit Log Investigation 1. Export vault audit logs 2. Run auditloganalyzer.py for anomaly detection 3. Review flagged events 4. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills borghei/secrets-vault-manager