Secrets Management

This walks you through setting up proper secrets management using HashiCorp Vault, AWS Secrets Manager, or Kubernetes Secrets. You get configuration examples for Vault with Raft storage and TLS, plus guides covering Kubernetes integration and rotation workflows. Use this when you need to stop hardcoding database credentials and API keys, or when you're trying to get audit logging and automated rotation working across multiple environments. The best practices section is solid on the basics like separating secrets per environment and not logging secret values, though you'll still need to figure out your organization's specific rotation policies and access patterns yourself.

skills.sh installs: 449
GitHub stars: 379
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aj-geddes/useful-ai-prompts --skill secrets-management --agent claude-code

Installs into .claude/skills of the current project.

Files

Overview

Deploy and configure secure secrets management systems to store, rotate, and audit access to sensitive credentials, API keys, and certificates across your infrastructure.

When to Use

Database credentials management
API key and token storage
Certificate management
SSH key distribution
Credential rotation automation
Audit and compliance logging
Multi-environment secrets
Encryption key management

Quick Start

Minimal working example:

# vault-config.hcl
storage "raft" {
  path    = "/vault/data"
  node_id = "node1"
}

listener "tcp" {
  address       = "0.0.0.0:8200"
  tls_cert_file = "/vault/config/vault.crt"
  tls_key_file  = "/vault/config/vault.key"
}

api_addr     = "https://0.0.0.0:8200"
cluster_addr = "https://0.0.0.0:8201"

ui = true