Secrets Management Skill

Purpose

This skill ensures secure handling of sensitive credentials, API keys, database passwords, and cryptographic keys throughout the CIA platform's development and deployment lifecycle. It enforces zero-tolerance for hardcoded secrets and mandates proper secrets management practices.

When to Use This Skill

Apply this skill when:

• ✅ Adding new external API integrations (Riksdagen, World Bank)
• ✅ Configuring database connections
• ✅ Implementing authentication mechanisms
• ✅ Setting up CI/CD pipelines
• ✅ Deploying to new environments
• ✅ Rotating credentials after security incidents
• ✅ Reviewing code that handles configuration

Do NOT skip for:

• ❌ Development/testing credentials (still use proper secrets management)