secrets-management Skill

Goal

This skill enforces the zero-trust handling of credentials.

1. The Core Commandments

1. NEVER commit secrets to Git. (Not even encrypted, if possible).
2. NEVER log secrets to stdout/files.
3. LEAST PRIVILEGE: An App's DB user should not be postgres (superuser).

Steps

Storage Patterns

Level 1: Environment Variables (.env)

• Dev: .env file (gitignored).
• Prod: Injected by platform (Vercel/Heroku env vars).
• Risk: Shell history exposure, accidental printenv.