Best secrets management skills, page 4

Python security vulnerability detection using Bandit SAST with CWE and OWASP mapping.

AgentSecOps/SecOpsAgentKit

Execute mcloud variables commands to list, get, set, and delete environment variables for a Cloud environment.

medusajs/medusa-agent-skills

AI-powered codebase security scanner that reasons about code like a security researcher — tracing data flows, understanding component interactions, and catching vulnerabilities that pattern-matching…

github/awesome-copilot

Security best practices and vulnerability prevention for Golang — injection (SQL, command, XSS), cryptography, path traversal, SSRF and HTTP security headers, cookies, secrets management, memory…

unxed/f4

Deploy cloud-native deception across AWS, Azure, and GCP using decoy (honey) resources whose only purpose is to generate a high-fidelity alert the instant an attacker touches them: canary IAM access…

mukul975/Anthropic-Cybersecurity-Skills

Configures GitHub Advanced Security (code scanning with CodeQL, secret scanning, dependency review, and Dependabot alerts) to perform automated static analysis and vulnerability detection across…

mukul975/Anthropic-Cybersecurity-Skills

RLS validation, security audits, OWASP compliance, and vulnerability scanning.

bybren-llc/safe-agentic-workflow

Detect exposed secrets, API keys, credentials, and tokens in code.

alirezarezvani/claude-code-tresor

Guides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration.

microsoft/GitHub-Copilot-for-Azure

Audit a pull request diff for common security concerns (input validation, sanitization, authentication and authorization, secrets management, unsafe dependencies, and related risks) and fold…

warpdotdev/oz-for-oss

Request user-supplied credentials securely into a dotenv file without exposing their values to the agent.

get-bb/bb

Detect compromised cloud credentials across AWS, Azure, and GCP by analyzing anomalous API activity, impossible-travel patterns, and credential-stuffing indicators using GuardDuty, Microsoft…

mukul975/Anthropic-Cybersecurity-Skills

Enable Microsoft Defender for Cloud (CSPM + CWPP) across VMs, containers, SQL, storage, and Key Vault, using Azure Policy for evaluation, Log Analytics for telemetry, Azure Arc for hybrid coverage…

mukul975/Anthropic-Cybersecurity-Skills

Integrates SAST, DAST, and SCA into CI/CD pipelines using Semgrep for SAST, Trivy for SCA and container scanning, OWASP ZAP for DAST, and Gitleaks for secrets detection.

mukul975/Anthropic-Cybersecurity-Skills

Configures HashiCorp Vault dynamic secrets engines for database credentials, AWS IAM keys, and PKI certificates, with automatic generation, lease management, and rotation to eliminate static secrets…

mukul975/Anthropic-Cybersecurity-Skills

Deploy HashiCorp Vault for centralized secrets management, covering dynamic secret generation for databases and cloud providers, transit encryption, PKI certificate management, and Kubernetes…

mukul975/Anthropic-Cybersecurity-Skills

Hardens serverless compute platforms (AWS Lambda, Azure Functions, Google Cloud Functions): least-privilege IAM roles, dependency vulnerability scanning, secrets management integration, input…

mukul975/Anthropic-Cybersecurity-Skills

Manage model API keys, default models and per-agent vault secrets with the penguin CLI.

Prism-Shadow/penguin-harness

Python configuration management via environment variables and typed settings.

wshobson/agents

Search Google via Bright Data SERP API. An agent skill from davila7/claude-code-templates.

davila7/claude-code-templates

Manage environment-variable hygiene and secrets safety across local development and production.

alirezarezvani/claude-skills

Managing secrets (API keys, database credentials, certificates) with Vault, cloud providers, and Kubernetes.

ancoleman/ai-design-components

Configuration and environment variable conventions for the Playwright scaffold — env file layout (env/.env.), dotenv loading via playwright.config.ts and the ENVIRONMENT variable, config objects in…

idavidov13/agentic-playwright

This skill should be used when users want to run any workload on Hugging Face Jobs infrastructure.

agent-skills-hub/agent-skills-hub

Manages Medusa Cloud resources through the Cloud CLI (mcloud).

medusajs/medusa-agent-skills

This skill provides guidance for implementing security features that span across Better Auth, including rate limiting, CSRF protection, session security, trusted origins, secret management, OAuth…

viclafouch/meme-studio

Vercel environment variable expert guidance. An agent skill from vercel/vercel-plugin.

vercel/vercel-plugin

Suggests using Microsoft Testing Platform (MTP) hot reload to iterate fixes on failing tests without rebuilding.

microsoft/testfx

Establish a security baseline for a website or web app. An agent skill from rampstackco/claude-skills.

rampstackco/claude-skills

Working with Conductor (conductor.build), the parallel-agent app.

freekmurze/dotfiles

This skill covers implementing Gitleaks for detecting and preventing hardcoded secrets in git repositories.

mukul975/Anthropic-Cybersecurity-Skills

Quarkus Security best practices for authentication, authorization, JWT/OIDC, RBAC, input validation, CSRF, secrets management, and dependency security.

affaan-m/ECC

Review Next.js security audit patterns for App Router and Server Actions.

IgorWarzocha/Opencode-Workflows

Generate patent-office-compliant figures via the PatentFig AI API — patent line art from text (PNG or SVG), vectorize drawings to SVG/DXF/vector PDF, AI-upscale images, and convert to filing-ready…

davila7/claude-code-templates

Phase 2 of building a Claude Managed Agent — turn a validated build sheet into exact API payloads and a resumable BYOK curl launch script, then launch (environment → agent → session → kickoff) using…

alirezarezvani/claude-skills

A skill your agent uses when writing Python code that integrates with Azure Blob Storage, AI Search, Document Intelligence, or Key Vault — or when configuring Managed Identity auth, designing a…

kid-sid/claude-spellbook

Run Azure compliance and security audits with azqr plus Key Vault expiration checks.

microsoft/GitHub-Copilot-for-Azure

A skill your agent uses when handling API keys, passwords, tokens, private keys, or any sensitive credential.

aiming-lab/MetaClaw

Integrate gitleaks and trufflehog into CI/CD pipelines to detect leaked secrets before deployment

mukul975/Anthropic-Cybersecurity-Skills

Runs Trivy across every target type it supports - container images, filesystems, Git repositories, and Kubernetes clusters - for OS and dependency vulnerabilities, IaC misconfiguration, exposed…

mukul975/Anthropic-Cybersecurity-Skills

A skill your agent uses when reviewing client-side JavaScript, HTML source, or git history for exposed credentials, API keys, or tokens.

thedaviddias/Front-End-Checklist

Analyze JS bundles and source maps for hardcoded secrets, API keys, JWTs, and internal endpoints

uphiago/recon-skills

Automatically discover security skills when working with authentication, authorization, input validation, security headers, vulnerability assessment, or secrets management.

rand/cc-polymath

Audit MCP (Model Context Protocol) server configurations for security issues.

github/awesome-copilot

Deploy to production — CI/CD pipelines, environment config, deployment strategies.

ww-w-ai/bkit-claude-code

Find leaked secrets in source code, Git history, build artifacts, and infrastructure — and audit the secrets-management posture preventing future leaks.

briiirussell/cybersecurity-skills

Troubleshoot Astronomer production deployments with Astro CLI.

astronomer/agents

Environment variable validation, security scanning, and management for Next.js, Vite, React, and Node.js applications

bobmatnyc/claude-mpm