Best secrets management skills, page 2

Pre-submit hygiene check for AI-agent-authored pull requests.

Akimiya-z/codex-guard

Swamp CLI — create and run models, build and validate workflows, query and manage data, store and retrieve vault secrets, develop and publish extensions, initialize repos, run reports, file issues…

swamp-club/swamp

Manages Git identity, HTTPS access tokens and SSH keys at the workspace level through three `tai tool` commands, each with a get, set, list, import or delete action.

YaoApp/yao

Guide for configuring, deploying, and operating the MonsterMQ broker.

vogler75/monster-mq

Secure GitHub Actions workflows against supply-chain, privilege, and shell-injection risks.

vechain/x-app-template

Prepare a Lade release: update CHANGELOG.md and bump crate versions with cargo set-version.

zifeo/lade

A skill your agent uses when writing, editing, reviewing, or running functional (end-to-end) tests for the Astronomer airflow-chart repository.

astronomer/airflow-chart

Diagnoses marchat client and server issues using -doctor, env configuration, and logs.

Cod-e-Codes/marchat

Detects fail-open insecure defaults (hardcoded secrets, weak auth, permissive security) that allow apps to run insecurely in production.

waybarrios/opencode-power-pack

Helps when network-related commands (like curl, git, npm, pip, brew) are failing, timing out, or running slowly due to network issues.

didi/mpx

Local Gitleaks scans for staged changes, push ranges, and full history in private repos, with redacted reports.

jamditis/claude-skills-journalism

Step-by-step checklist for adding a new NEXTPUBLIC environment variable.

blockscout/frontend

Design, implement, or review Composio CLI commands under ts/packages/cli using Effect, effect/unstable/cli, services, output conventions, configuration and environment variables, and local vendor…

ComposioHQ/composio

Deploy Memoria with Docker Compose or Kubernetes. An agent skill from matrixorigin/memoria.

matrixorigin/memoria

Shows how to use Warp's REST API and command line to start Oz cloud agents, check their runs, schedule them, manage their environments and provide secrets.

warpdotdev/warp

GAIK toolkit overview and reference. An agent skill from GAIK-project/gaik-toolkit.

GAIK-project/gaik-toolkit

Maintain @next/rspack-core and @next/rspack-binding packages.

vercel/next.js

Run the mandatory pre-commit checks for the poku repository before staging a commit.

wellwelwel/poku

Scans a repository's source for security vulnerabilities with the supercov CLI, pointing to the line of each finding and mapping it to CWE classes.

supercorp-ai/supercov

Central authority on git hook implementations, modern best practices, and tooling for .NET/C, JavaScript/TypeScript, Python, and polyglot repositories.

Prorise-cool/Claude-Code-Multi-Agent

Project configuration and rendering mode patterns for Rasengan.js.

rasengan-dev/rasenganjs

Handles npm registry tasks such as whoami checks, package name availability, name reservation and publishing, with credentials pulled from 1Password.

steipete/agent-scripts

V8-based lightweight edge functions on EdgeOne Makers. An agent skill from TencentEdgeOne/edgeone-makers-tools.

TencentEdgeOne/edgeone-makers-tools

Teach agents to create, organize, maintain, evaluate, import, convert, and automate noodle terminal REST client collections using supported CLI commands plus YAML and dotenv files.

wilfredinni/noodle

Deploy an existing project to a website on Hostinger web hosting (Shared, Cloud or Agency plans) and keep it deployed: picks the right deploy for static sites, Node.js apps (Next.js, Nuxt, Express…

hostinger/api-mcp-server

Connects the Jev decision model by storing a TypeSafe, OpenRouter, Venice or OpenCode Zen key with jev setup-key, so the key never passes through the agent.

kerpopule/hermes-jev-skills

Configure LLM models and providers for Letta agents and servers.

letta-ai/skills

Shared HomeRail rules for AI agents operating the local-source release candidate: service roles, environment variables, secrets, provider boundaries, Docker callback networking, update expectations…

xiaotianfotos/homerail

Security analysis for the Azure Functions Node.js worker. An agent skill from Azure/azure-functions-nodejs-worker.

Azure/azure-functions-nodejs-worker

Environment variable validation, synchronization, and management across local development, CI/CD, and deployment platforms

bobmatnyc/claude-mpm

This project uses flow for automation. An agent skill from flowexec/flow.

flowexec/flow

Publish a Python package to PyPI using uv with credentials loaded from a local .secrets file.

ML4ITS/TimeVQVAE

Bilingual guide for the OFFLINEPACKINGBMR and OFFLINEPACKEDDATA environment variables that control LLaVA-OneVision2 training-side packing — what each gate does, why both must be enabled together…

EvolvingLMMs-Lab/LLaVA-OneVision-2

Reviews Claude configuration files for security, structure, and prompt engineering quality.

bitwarden/ai-plugins

Wire encrypted credentials to environment variables using the credential: convention.

growthxai/output

Answer questions about ArkEnv and help implement environment variable validation.

yamcodes/arkenv

Configuration patterns for .NET 10 applications. An agent skill from codewithmukesh/dotnet-claude-kit.

codewithmukesh/dotnet-claude-kit

Rules for working behind Iron Proxy: connect external accounts without handling raw tokens, treat blocked requests as policy outcomes, and never claim a connection before it works.

nanocoai/nanoclaw

A skill your agent uses when working on Sake configuration — .sake.yml, environment variables, CLI options, ConfigManager, ConfigResolver, or adding new config options.

kattouf/Sake

Review AI API key leakage patterns and redaction strategies.

IgorWarzocha/Opencode-Workflows

When and how to reach for the companion detectors -- bandit (Python SAST) and trivy (deps + secrets + IaC misconfig) -- alongside the core semgrep/CodeQL/osv/trufflehog toolchain

deonmenezes/mantishack

Secure secrets management practices for CI/CD pipelines using Vault, AWS Secrets Manager, and other tools.

davila7/claude-code-templates

Checklist for deprecating a NEXTPUBLIC environment variable — immediate removal, or a grace period before a later removal.

blockscout/frontend

Practical Docker and Docker Compose patterns for local development: stacks, override files, networking, volumes, container hardening and debugging.

affaan-m/ECC

Guidance for designing secure APIs on Azure - authentication, authorization, gateway controls, input validation, rate limiting, secret management, and runtime threat detection - aligned to OWASP API…

vinayaklatthe/microsoft-security-skills

Loads a missing environment variable or API key from the team's Infisical workspace into the current shell, or runs a command with all project secrets injected.

Devin-AXIS/iPolloWork

Covers creating and managing KubeSphere DevOps credentials as typed Kubernetes Secrets that sync to Jenkins, including the API endpoints and a common pitfall.

kubesphere/kubesphere

Bitwarden's canonical pattern for using a secret inside a GitHub Actions job: authenticate to Azure with the OIDC triad, pull the secret from an Azure Key Vault via the bitwarden/gh-actions…

bitwarden/ai-plugins