Does this skill support AWS cloud services?

Yes, it includes detailed implementation patterns for both AWS Secrets Manager and AWS SSM Parameter Store, including batch fetching and decryption.

What is the recommended approach for local development secrets?

The skill promotes the .env.example pattern, ensuring placeholders are committed while actual secrets remain local and are excluded via .gitignore.

How does this skill help prevent leaked secrets?

It provides configuration guidance for tools like Gitleaks and git-secrets, setting up pre-commit hooks and CI/CD scans to catch credentials before they are committed to history.

Can it help with secret rotation?

Yes, it provides strategies for zero-downtime JWT secret rotation and instructions for leveraging AWS Secrets Manager's built-in rotation functions.

Secret Management & Security

Name: Secret Management & Security
Author: chavangorakh1999

bychavangorakh1999

0•

安全与测试

Implements industry-standard security patterns for managing sensitive credentials, AWS secrets, and Kubernetes environment variables.

The Secret Management skill provides a comprehensive framework for handling sensitive information throughout the software development lifecycle. It equips developers with best practices for local environment configuration, cloud-native integrations with AWS Secrets Manager and SSM Parameter Store, and secure Kubernetes orchestration. By implementing zero-trust principles and automated leak detection strategies, this skill ensures that API keys, database credentials, and certificates are never exposed in source control, logs, or process lists.

主要功能

01Zero-downtime secret rotation strategies for production environments

02Kubernetes External Secrets Operator configuration and patterns

030 GitHub stars

04Strict environment variable validation and local .env management

05Secure integration with AWS Secrets Manager and SSM Parameter Store

06Automated secret leak detection using Gitleaks and git-secrets

使用场景

01Implementing pre-commit hooks and CI/CD pipelines to prevent credential leaks

02Auditing an existing codebase for hardcoded secrets and insecure logging

03Setting up a production-ready secret storage system on AWS or Kubernetes

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add chavangorakh1999/sde-skills secret-management

For use in Claude.ai and ChatGPT

主要功能

01Zero-downtime secret rotation strategies for production environments

02Kubernetes External Secrets Operator configuration and patterns

030 GitHub stars

04Strict environment variable validation and local .env management

05Secure integration with AWS Secrets Manager and SSM Parameter Store

06Automated secret leak detection using Gitleaks and git-secrets

使用场景

01Implementing pre-commit hooks and CI/CD pipelines to prevent credential leaks

02Auditing an existing codebase for hardcoded secrets and insecure logging

03Setting up a production-ready secret storage system on AWS or Kubernetes

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add chavangorakh1999/sde-skills secret-management

For use in Claude.ai and ChatGPT