mcpField
S
secrets-management

secrets-management

github.com/aj-geddesSecurity374446 installsUpdated 34w ago
Repository

About secrets-management

A skill for deploying and configuring systems that store, rotate, and audit sensitive credentials, keys, and certificates. Its reference guides cover HashiCorp Vault, Kubernetes, and AWS Secrets Manager.

Key features

  1. 01Secrets storage and configuration
  2. 02Credential rotation guidance
  3. 03Access auditing practices
  4. 04HashiCorp Vault setup references
  5. 05Kubernetes and AWS guides

Use cases

  1. 01Managing database credentials
  2. 02Storing API keys and tokens
  3. 03Distributing SSH keys
  4. 04Managing certificates across environments

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/aj-geddes/useful-ai-prompts --skill secrets-management

After installing, type/secrets-managementin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/
aws-secrets-manager-configuration.md
hashicorp-vault-setup.md
kubernetes-secrets.md
vault-kubernetes-integration.md
vault-secret-configuration.md
scripts/
validate-config.sh
templates/
config-starter.yaml

Details

From the project README

Secrets Management

Table of Contents

Overview

Deploy and configure secure secrets management systems to store, rotate, and audit access to sensitive credentials, API keys, and certificates across your infrastructure.

When to Use

  • Database credentials management
  • API key and token storage
  • Certificate management
  • SSH key distribution
  • Credential rotation automation
  • Audit and compliance logging
  • Multi-environment secrets
  • Encryption key management

Quick Start

Minimal working example:

# vault-config.hcl
storage "raft" {
  path    = "/vault/data"
  node_id = "node1"
}

listener "tcp" {
  address       = "0.0.0.0:8200"
  tls_cert_file = "/vault/config/vault.crt"
  tls_key_file  = "/vault/config/vault.key"
}

api_addr     = "https://0.0.0.0:8200"
cluster_addr = "https://0.0.0.0:8201"

ui = true

Reference Guides

Detailed implementations in the references/ directory:

GuideContents
HashiCorp Vault SetupHashiCorp Vault Setup
Vault Kubernetes IntegrationVault Kubernetes Integration
Vault Secret ConfigurationVault Secret Configuration
AWS Secrets Manager ConfigurationAWS Secrets Manager Configuration
Kubernetes SecretsKubernetes Secrets

Best Practices

✅ DO
  • Rotate secrets regularly
  • Use strong encryption
  • Implement access controls
  • Audit secret access
  • Use managed services
  • Implement secret versioning
  • Encrypt secrets in transit
  • Use separate secrets per environment
❌ DON'T
  • Store secrets in code
  • Use weak encryption
  • Share secrets via email/chat
  • Commit secrets to version control
  • Use single master password
  • Log secret values
  • Hardcode credentials
  • Disable rotation

Comments

Markdown supported