Secrets Rotation

Automates the rotation of API keys, database credentials, certificates, and encryption keys with zero-downtime deployment. You'd reach for this when handling compliance requirements, responding to security incidents, or just hardening your secrets management lifecycle. The package includes implementations for AWS Secrets Manager, HashiCorp Vault, and Kubernetes secrets with grace periods and rollback procedures built in. The audit logging is comprehensive, which matters when you need to prove rotation actually happened. Honestly, the hardest part of secrets rotation isn't generating new values, it's coordinating the changeover without breaking active connections, and this handles that dance for you.

skills.sh installs: 459
GitHub stars: 379
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add aj-geddes/useful-ai-prompts --skill secrets-rotation --agent claude-code

Installs into .claude/skills of the current project.

Files

Overview

Implement automated secrets rotation strategy for credentials, API keys, certificates, and encryption keys with zero-downtime deployment and comprehensive audit logging.

When to Use

API key management
Database credentials
TLS/SSL certificates
Encryption key rotation
Compliance requirements
Security incident response
Service account management

Quick Start

Minimal working example:

// secrets-manager.js
const AWS = require("aws-sdk");
const crypto = require("crypto");

class SecretsManager {
  constructor() {
    this.secretsManager = new AWS.SecretsManager({
      region: process.env.AWS_REGION,
    });

    this.rotationSchedule = new Map();
  }

  /**
   * Generate new secret value
   */
  generateSecret(type = "api_key", length = 32) {
    switch (type) {
      case "api_key":
        return crypto.randomBytes(length).toString("hex");

SKILL.md on GitHub