Best secrets management skills, page 3

Installation and configuration skill for Agent Brain document search system.

SpillwaveSolutions/agent-brain

Ask the user for API keys, tokens, or other credentials from a Cloudroom cloud thread and write them to a dotenv file without exposing them in chat.

davidondrej/cloudroom-core

Rule pack for the environment variable reference — en/self-host/deploy/configuration/environments.mdx.

langgenius/dify-docs

Connect to the running Redmine instance and log in via the Playwright MCP browser, using REDMINEPLAYRIGHTURL/REDMINEPLAYRIGHTUSER/REDMINEPLAYRIGHTPASSWORD environment variables.

haru/redmine_ai_helper

Run or install repo security leak checks with BetterLeaks and Trivy.

instructa/agent-skills

Lets the agent list and read the secrets a user has configured, such as API keys and tokens, through two tai tools instead of hardcoding credentials into code or commands.

YaoApp/yao

How this repo manages API secrets and the four local-run environments (local/dev/staging/prod).

kortix-ai/suna

Installs the `dial` CLI and a credential in NanoClaw agent containers so chosen agents can send SMS, place AI voice calls and receive verification codes.

nanocoai/nanoclaw

Deep analysis of Git history: identify frequently changed hotspot files, analyze code ownership by contributor, and scan for leaked secrets.

zebbern/claude-code-guide

Turns a leaked key, token or password into one tracked rotation task the moment it's spotted, instead of a reminder repeated every session.

avelikiy/great_cto

Guidance for securing Azure App Service web apps and APIs — managed identity, Easy Auth with Microsoft Entra ID, network isolation via private endpoints + VNet integration, HTTPS / TLS hardening…

vinayaklatthe/microsoft-security-skills

Runbook for deploying or redeploying the CodFlow Astro storefront to Vercel, with required environment variables, CLI or Git methods and checks afterwards.

bighadj22/codflow

Guidance for writing idempotent Ansible playbooks, roles and inventories, with patterns for handlers, rolling deployments, Vault secrets and error handling.

RightNow-AI/openfang

Security-focused source code review and SAST. An agent skill from transilienceai/communitytools.

transilienceai/communitytools

Audits code and infrastructure for vulnerabilities and produces a severity-rated report with locations and remediation, using SAST, dependency and secrets scans plus manual review.

Jeffallan/claude-skills

A skill your agent uses when authoring, planning, or running a declarative sbxenv.yaml file for Docker Sandboxes (sbx env create/run/plan/exec/rm), even if the user just says they want to "check in…

docker/skills

How to install, configure, and use the chorus CLI — install it, manage agents with chorus agents (add/remove/list), the connection environment variables, and MCP operations via chorus mcp.

Chorus-AIDLC/Chorus

Installs Codex as an agent provider for NanoClaw groups, with streaming, MCP tools, server-side history and vault-only credentials, next to or instead of Claude.

nanocoai/nanoclaw

Create or update Novu environment variables in the user's project safely (never expose the secret key to the client).

novuhq/novu

Deliver a fast pre-commit safety scan: file size, anonymity (author / affiliation strings in tex/bib), hardcoded secrets, and invisible-Unicode carriers.

flonat/flonat-research

Azure Key Vault Secrets Java SDK for secret management. An agent skill from microsoft/skills.

microsoft/skills

How to monitor and fix security issues in Massing — CodeQL alerts, dependency audits, secret scanning, and ReDoS/XXE fixes.

ibuilder/massing

How to install, configure, and use the chorus CLI — install it, manage agents with chorus agents (add/remove/list), the connection environment variables, and MCP operations via chorus mcp.

Chorus-AIDLC/Chorus

Ghost Security - Secrets and credentials scanner. An agent skill from ghostsecurity/skills.

ghostsecurity/skills

Read pinact's documentation with pinact docs list and pinact docs show <name before answering.

saleor/apps

Deploys a production n8n instance to a fresh Linux server over SSH with Docker Compose and Caddy HTTPS, in single or queue mode, and covers updates, backups and hardening.

czlonkowski/n8n-skills

Quarkus security implementation patterns: JWT and OIDC authentication, @RolesAllowed RBAC and SecurityIdentity checks, Bean Validation and custom validators, parameterized Panache queries, BCrypt…

affaan-m/ECC

Manage secrets and certificates in Azure Key Vault. An agent skill from sickn33/agentic-awesome-skills.

sickn33/agentic-awesome-skills

Build applications using Azure App Configuration SDK for JavaScript (@azure/app-configuration).

microsoft/skills

Azure Key Vault Keys SDK for .NET. An agent skill from microsoft/skills.

microsoft/skills

Builds with and operates Pi, the minimal terminal coding harness.

K-Dense-AI/scientific-agent-skills

Emulates any Aspire CLI build identity (channel, version, commit, package source) from a locally built CLI using ASPIRECLI environment variables and the install sidecar, so a reported bug can be…

microsoft/aspire

A skill your agent uses when the user asks to set up secret management infrastructure, integrate HashiCorp Vault, configure cloud secret stores (AWS Secrets Manager, Azure Key Vault, GCP Secret…

alirezarezvani/claude-skills

Detect hardcoded secrets in code or configuration accessible to the target agent.

Tencent/AI-Infra-Guard

Working on RedAmon's supply-chain scanner (offline OSV + GuardDog + retire + trufflehog): the offline OSV database that the scan path does not bootstrap, the world-readable requirement for the…

samugit83/redamon

Expert-level Windows batch file (.bat/.cmd) skill for writing, debugging, and maintaining CMD scripts.

github/awesome-copilot

Static security review for Flutter mobile apps and Dart code: hardcoded secrets, insecure storage, unsafe network calls, leaky logs, vulnerable dependencies.

VeryGoodOpenSource/vgv-ai-flutter-plugin

Implements authentication, authorization, encryption, secrets management, and security hardening patterns.

CloudAI-X/claude-workflow-v2

Detect hardcoded sensitive data (API keys, access tokens, private keys, passwords, etc.) in publicly accessible code — frontend JavaScript, mobile apps, client-side bundles, and HTML templates.

utkusen/sast-skills

Guide for using MSBuild Server to improve CLI build performance.

microsoft/testfx

Gives NanoClaw agents the ability to deploy web apps to Vercel by installing the Vercel CLI in agent containers and wiring up credential injection through OneCLI.

nanocoai/nanoclaw

Deploy apps to Vercel. An agent skill from nanocoai/nanoclaw.

nanocoai/nanoclaw

Guide for configuring and managing GitHub secret scanning, push protection, custom patterns, and secret alert remediation.

github/awesome-copilot

How to build and run GPU targets under Buck in fbcode. An agent skill from facebookexperimental/triton.

facebookexperimental/triton

Add runtime configuration to specx Python services with pydantic-settings.

maksimzayats/specx

Security hardening and best practices for robotic systems, covering SROS2 DDS security, network segmentation, secrets management, secure boot, and the physical-cyber safety intersection.

arpitg1304/robotics-agent-skills

This skill should be used when user asks to "query Azure resources", "list storage accounts", "manage Key Vault secrets", "work with Cosmos DB", "check AKS clusters", "use Azure MCP", or interact…

fcakyon/claude-codex-settings

Secure-by-default environment variable management for Claude Code sessions.

sickn33/agentic-awesome-skills