Best secrets management skills for Claude Code, Codex and other agents.

Gets Firecrawl working in a project: signs you in through the browser, saves FIRECRAWL_API_KEY to .env and picks the first SDK or REST path.

firecrawl/firecrawl

Audits source code, dependencies and config files for vulnerabilities and hardcoded secrets, using two bundled Python scanners and an OWASP Top 10 checklist.

eigent-ai/eigent

Plan and apply Go dependency updates, including advisory-driven bumps, Trivy/govulncheck validation, and supply-chain review.

trufflesecurity/trufflehog

Installs or refreshes Iron Proxy and its Iron Control web console for NanoClaw, with a local Docker setup, database, credentials and a human approval bridge.

nanocoai/nanoclaw

BibiGPT CLI for summarizing videos, audio, and podcasts directly in the terminal.

JimmyLv/BibiGPT-v1

Migrates the compatible subset of settings and global file-based MCP servers from the Warp desktop app into Warp Agent CLI without exposing credentials or state.

warpdotdev/warp

Configure Better Auth server and client, set up database adapters, manage sessions, add plugins, and handle environment variables.

latitude-dev/latitude-llm

Installs or refreshes OneCLI as the gateway provider for NanoClaw, copying the adapter files, registering the provider and running the setup script.

nanocoai/nanoclaw

Deploys and manages Vercel projects through the CLI using an access token from the environment or a .env file instead of interactive login.

vercel-labs/agent-skills

Deploys and configures a LangBot instance with Docker Compose or Kubernetes, covering config.yaml, the Box sandbox runtime, the plugin runtime and the global API key.

langbot-app/LangBot

Conventions for SGLang environment variables — where to define, how to access, how to name, and how to deprecate.

sgl-project/sglang

Releases a signed, notarized CodexBar build: confirms the changelog, resolves signing credentials from 1Password, runs the release script in tmux, and updates the Sparkle appcast and Homebrew tap.

steipete/CodexBar

Inventories and maintains a fleet of Macs from a desired-state file: package updates, repo and Xcode sync, and disk, backup and security health reports.

steipete/agent-scripts

Pre-launch and pre-commit audit for vibe coding projects. An agent skill from noobnooc/agent.

noobnooc/agent

How to load secrets and environment variables from 1Password programmatically using the official @1password/sdk (JavaScript/TypeScript).

MadAppGang/claudish

Add a Baserow configuration environment variable for the backend, frontend, or both, and propagate it through settings, Nuxt runtime config, Docker Compose, documentation, consumers, and tests as…

baserow/baserow

Decides whether a Notion Worker should use a brokered credential, a plaintext environment secret, or OAuth to authenticate against a non-Notion service.

makenotion/workers-template

EdgeOne Makers CLI command reference. An agent skill from TencentEdgeOne/edgeone-makers-tools.

TencentEdgeOne/edgeone-makers-tools

Analyze environment variables in JavaScript/TypeScript projects.

qdhenry/Claude-Command-Suite

A skill your agent uses when: authenticating git and GitHub CLI for NEventStore tasks, fixing gh auth errors, setting PAT environment variables, preparing a shell session for git push and gh issue…

NEventStore/NEventStore

Synchronize bilingual documentation when StaticPHP v3 user-facing or developer-facing documentation must change.

crazywhalecc/static-php-cli

Configure and bootstrap a Ts.ED v8 server - the @Configuration decorator or configuration() on the Server class, PlatformExpress/PlatformKoa/PlatformFastify.bootstrap, server options (mount…

tsedio/tsed

This skill should be used when the user asks to "add tracking", "add a PostHog event", "change telemetry consent", "instrument onboarding", "debug analytics", or changes telemetry.ts…

OpenHands/OpenHands

Writes Vitest tests following project patterns: tests/ directories, vi.mock() for module mocking with vi.hoisted() for test-time factories, global LLM mock from src/test/setup.ts, environment…

caliber-ai-org/ai-setup

Covers Daytona CLI setup, sandbox debugging, keeping a sandbox alive and which credentials the CLI uses, for when Daytona itself is the problem rather than the tests.

different-ai/openwork

A skill your agent uses when a user wants to create, run, or analyze evaluation suites for Microsoft 365 Copilot declarative agents with the public @microsoft/m365-copilot-eval CLI.

microsoft/work-iq

Run jit's pre-release QA — a team of QA-engineer subagents (functionality, integrations, UX, bug-hunting, code review) that exercise a release candidate on this real Mac and hand back a consolidated…

jitpass/jit

Inspect, review or triage GitHub Code Scanning alerts, including CodeQL findings; apply verified dismissals when authorized.

netdata/netdata

A skill your agent uses when authoring, reviewing, or refactoring Azure Bicep code.

timothywarner-org/claude-code

Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks.

AgentSecOps/SecOpsAgentKit

Request a security expert assessment for code changes that touch child process spawning, file system access, configuration loading, or environment variable handling.

ktnyt/cclsp

Run Windows tasks in Niubash, the GNU Bash-compatible Windows-native shell.

unixwin/niubash

Portable credential management for AI agents using age encryption, session-scoped leases, auto-rotation, and killswitch.

joelhooks/agent-secrets

Vercel CLI expert guidance. An agent skill from vercel/vercel-plugin.

vercel/vercel-plugin

Finalize a merge request: rebase onto main, run bugs, simplify, and specs in parallel, apply, then refactor last.

zifeo/lade

Deploys, configures, and troubleshoots IBM Cloud Code Engine workloads using the ibmcloud ce CLI.

IBM/CodeEngine

Expert Fish shell configuration including config files, functions, abbreviations, prompts, environment variables, and scripting.

wcygan/dotfiles

Debug container agent issues. An agent skill from sbusso/claudeclaw.

sbusso/claudeclaw

Manage secrets and PKI with HashiCorp Vault. An agent skill from BagelHole/DevOps-Security-Agent-Skills.

BagelHole/DevOps-Security-Agent-Skills

Walks a repository through release readiness before it goes public: secrets audit, licensing, documentation, CI and language-specific packaging.

trailofbits/skills

Guide users through configuring key MongoDB MCP server options.

mongodb/agent-skills

Keep keypaste's desktop screens, CLI output, site, README and brand assets on brand.

notinferred/keypaste

Dev/test workflow for tracer engineers working on the Datadog .NET tracer — build a local Datadog.AzureFunctions NuGet package, deploy it to a test Azure Function App, trigger it, and analyze…

DataDog/dd-trace-dotnet

Pre-submit hygiene check for AI-agent-authored pull requests.

Akimiya-z/codex-guard

Swamp CLI — create and run models, build and validate workflows, query and manage data, store and retrieve vault secrets, develop and publish extensions, initialize repos, run reports, file issues…

swamp-club/swamp

Manages Git identity, HTTPS access tokens and SSH keys at the workspace level through three `tai tool` commands, each with a get, set, list, import or delete action.

YaoApp/yao

Guide for configuring, deploying, and operating the MonsterMQ broker.

vogler75/monster-mq

Secure GitHub Actions workflows against supply-chain, privilege, and shell-injection risks.

vechain/x-app-template