Secrets management

Rule pack for the environment variable reference — en/self-host/deploy/configuration/environments.mdx.

langgenius/dify-docs

Run or install repo security leak checks with BetterLeaks and Trivy.

instructa/agent-skills

Lets the agent list and read the secrets a user has configured, such as API keys and tokens, through two tai tools instead of hardcoding credentials into code or commands.

YaoApp/yao

How this repo manages API secrets and the four local-run environments (local/dev/staging/prod).

kortix-ai/suna

Explains how to call external APIs through the OneCLI proxy, which injects stored credentials into outgoing HTTPS requests so the agent never handles keys.

nanocoai/nanoclaw

Reviews Claude configuration files for security, structure, and prompt engineering quality.

bitwarden/ai-plugins

Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.

zebbern/claude-code-guide

Turns a leaked key, token or password into one tracked rotation task the moment it's spotted, instead of a reminder repeated every session.

avelikiy/great_cto

Runbook for deploying or redeploying the CodFlow Astro storefront to Vercel, with required environment variables, CLI or Git methods and checks afterwards.

bighadj22/codflow

Guidance for securing Azure App Service web apps and APIs — managed identity, Easy Auth with Microsoft Entra ID, network isolation via private endpoints + VNet integration, HTTPS / TLS hardening…

vinayaklatthe/microsoft-security-skills

Guidance for writing idempotent Ansible playbooks, roles and inventories, with patterns for handlers, rolling deployments, Vault secrets and error handling.

RightNow-AI/openfang

Security-focused source code review and SAST. An agent skill from transilienceai/communitytools.

transilienceai/communitytools

Loads a missing environment variable or API key from the team's Infisical workspace into the current shell, or runs a command with all project secrets injected.

Devin-AXIS/iPolloWork

A skill your agent uses when authoring, planning, or running a declarative sbxenv.yaml file for Docker Sandboxes (sbx env create/run/plan/exec/rm), even if the user just says they want to "check in…

docker/skills

Audits code and infrastructure for vulnerabilities and produces a severity-rated report with locations and remediation, using SAST, dependency and secrets scans plus manual review.

Jeffallan/claude-skills

How to install, configure, and use the chorus CLI — install it, manage agents with chorus agents (add/remove/list), the connection environment variables, and MCP operations via chorus mcp.

Chorus-AIDLC/Chorus

All-in-one project configuration and health management. An agent skill from jezweb/claude-skills.

jezweb/claude-skills

Installs Codex as an agent provider for NanoClaw groups, with streaming, MCP tools, server-side history and vault-only credentials, next to or instead of Claude.

nanocoai/nanoclaw

Rules for working behind Iron Proxy: connect external accounts without handling raw tokens, treat blocked requests as policy outcomes, and never claim a connection before it works.

nanocoai/nanoclaw

Sandbox audit that probes, from inside a live coding-agent session, what the agent can really reach: secret files it can open, secret-like environment variables, files that git, the shell, the…

RyanAlberts/best-of-Agent-Harnesses

Deliver a fast pre-commit safety scan: file size, anonymity (author / affiliation strings in tex/bib), hardcoded secrets, and invisible-Unicode carriers.

flonat/flonat-research

Create or update Novu environment variables in the user's project safely (never expose the secret key to the client).

novuhq/novu

Bitwarden's canonical pattern for using a secret inside a GitHub Actions job: authenticate to Azure with the OIDC triad, pull the secret from an Azure Key Vault via the bitwarden/gh-actions…

bitwarden/ai-plugins

Azure Key Vault Secrets Java SDK for secret management. An agent skill from microsoft/skills.

microsoft/skills

How to monitor and fix security issues in Massing — CodeQL alerts, dependency audits, secret scanning, and ReDoS/XXE fixes.

ibuilder/massing

How to install, configure, and use the chorus CLI — install it, manage agents with chorus agents (add/remove/list), the connection environment variables, and MCP operations via chorus mcp.

Chorus-AIDLC/Chorus

Connect to the running Redmine instance and log in via the Playwright MCP browser, using REDMINEPLAYRIGHTURL/REDMINEPLAYRIGHTUSER/REDMINEPLAYRIGHTPASSWORD environment variables.

haru/redmine_ai_helper

Ghost Security - Secrets and credentials scanner. An agent skill from ghostsecurity/skills.

ghostsecurity/skills

Read pinact's documentation with pinact docs list and pinact docs show <name before answering.

saleor/apps

Deploys a production n8n instance to a fresh Linux server over SSH with Docker Compose and Caddy HTTPS, in single or queue mode, and covers updates, backups and hardening.

czlonkowski/n8n-skills

Quarkus security implementation patterns: JWT and OIDC authentication, @RolesAllowed RBAC and SecurityIdentity checks, Bean Validation and custom validators, parameterized Panache queries, BCrypt…

affaan-m/ECC

Manage secrets and certificates in Azure Key Vault. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Build applications using Azure App Configuration SDK for JavaScript (@azure/app-configuration).

microsoft/skills

Azure Key Vault Keys SDK for .NET. An agent skill from microsoft/skills.

microsoft/skills

Builds with and operates Pi, the minimal terminal coding harness.

K-Dense-AI/scientific-agent-skills

Emulates any Aspire CLI build identity (channel, version, commit, package source) from a locally built CLI using ASPIRECLI environment variables and the install sidecar, so a reported bug can be…

microsoft/aspire

A skill your agent uses when the user asks to set up secret management infrastructure, integrate HashiCorp Vault, configure cloud secret stores (AWS Secrets Manager, Azure Key Vault, GCP Secret…

alirezarezvani/claude-skills

Detect hardcoded secrets in code or configuration accessible to the target agent.

Tencent/AI-Infra-Guard

Working on RedAmon's supply-chain scanner (offline OSV + GuardDog + retire + trufflehog): the offline OSV database that the scan path does not bootstrap, the world-readable requirement for the…

samugit83/redamon

Expert-level Windows batch file (.bat/.cmd) skill for writing, debugging, and maintaining CMD scripts.

github/awesome-copilot

Static security review for Flutter mobile apps and Dart code: hardcoded secrets, insecure storage, unsafe network calls, leaky logs, vulnerable dependencies.

VeryGoodOpenSource/vgv-ai-flutter-plugin

Implements authentication, authorization, encryption, secrets management, and security hardening patterns.

CloudAI-X/claude-workflow-v2

Detect hardcoded sensitive data (API keys, access tokens, private keys, passwords, etc.) in publicly accessible code — frontend JavaScript, mobile apps, client-side bundles, and HTML templates.

utkusen/sast-skills

Gives NanoClaw agents the ability to deploy web apps to Vercel by installing the Vercel CLI in agent containers and wiring up credential injection through OneCLI.

nanocoai/nanoclaw

Deploy apps to Vercel. An agent skill from nanocoai/nanoclaw.

nanocoai/nanoclaw

Guide for configuring and managing GitHub secret scanning, push protection, custom patterns, and secret alert remediation.

github/awesome-copilot

How to build and run GPU targets under Buck in fbcode. An agent skill from facebookexperimental/triton.

facebookexperimental/triton

Add runtime configuration to specx Python services with pydantic-settings.

maksimzayats/specx