secrets-management

name	secrets-management
description	Secrets handling, environment variables, and vault integration.
allowed-tools	Read, Write, Edit, Bash, Glob, Grep
graph	{"domains":["domain:web-development"],"specializations":["specialization:web-development"],"skillAreas":["skill-area:backend-security","skill-area:configuration-management"],"roles":["role:backend-engineer","role:security-engineer"],"topics":["topic:twelve-factor-app"]}

Secrets Management Skill

Expert assistance for handling secrets securely.

Capabilities

• Configure environment variables
• Integrate with vaults
• Handle secrets rotation
• Secure CI/CD secrets
• Audit secret access

Best Practices

// Never commit secrets
// Use environment variables
const config = {
  databaseUrl: process.env.DATABASE_URL,
  jwtSecret: process.env.JWT_SECRET,
  apiKey: process.env.API_KEY,
};

// Validate required secrets
const required = ['DATABASE_URL', 'JWT_SECRET'];
required.forEach((key) => {
  if (!process.env[key]) {
    throw new Error(`Missing required env var: ${key}`);
  }
});

Target Processes

• secrets-setup
• security-hardening
• ci-cd-security