What is the Secrets Management skill for Claude Code?

It is a specialized capability that provides guidance on designing and implementing secure storage, rotation, and management of credentials, API keys, and certificates.

Which secret management tools are covered?

The skill includes documentation and implementation patterns for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and GCP Secret Manager.

Does this skill help with automated credential rotation?

Yes, it provides detailed strategies for dual-version rotation and zero-downtime updates to ensure services remain available while credentials change.

Can this skill assist with encryption architecture?

Absolutely, it covers envelope encryption, zero-knowledge architecture, and the management of Key Encryption Keys (KEK) and Data Encryption Keys (DEK).

Is it suitable for cloud-native development?

Yes, it is specifically designed to help developers implement security best practices across all major cloud providers and Kubernetes environments.

Secrets Management

Name: Secrets Management
Author: melodic-software

bymelodic-software

•

セキュリティとテスト

Designs and implements secure storage, rotation, and lifecycle patterns for credentials, API keys, and certificates.

概要

The Secrets Management skill provides comprehensive architectural patterns and best practices for securing sensitive information within modern software systems. It guides developers through the implementation of industry-standard tools like HashiCorp Vault, AWS Secrets Manager, and Azure Key Vault, while covering advanced concepts such as envelope encryption, zero-knowledge architectures, and automated rotation. This skill is essential for building compliant, resilient systems that minimize credential exposure and automate security workflows across cloud and on-premise environments.

主な機能

Architectural patterns for centralized secret storage and zero-knowledge systems
Comprehensive guidance on managing certificates, SSH keys, and database credentials
5 GitHub stars
Strategies for zero-downtime credential rotation and dual-version management
Detailed implementation guides for HashiCorp Vault, AWS, Azure, and GCP
Best practices for envelope encryption and key hierarchy (KEK/DEK) management

ユースケース

Designing a secure, automated credential rotation workflow for production databases
Integrating microservices with cloud-native secret managers or HashiCorp Vault
Implementing envelope encryption to protect sensitive data at rest in distributed systems

概要

主な機能

Architectural patterns for centralized secret storage and zero-knowledge systems
Comprehensive guidance on managing certificates, SSH keys, and database credentials
5 GitHub stars
Strategies for zero-downtime credential rotation and dual-version management
Detailed implementation guides for HashiCorp Vault, AWS, Azure, and GCP
Best practices for envelope encryption and key hierarchy (KEK/DEK) management

ユースケース

Designing a secure, automated credential rotation workflow for production databases
Integrating microservices with cloud-native secret managers or HashiCorp Vault
Implementing envelope encryption to protect sensitive data at rest in distributed systems