Security Secrets Management

Overview

Use this skill to prevent secret exposure and ensure secrets remain manageable throughout their lifecycle.

Scope Boundaries

• New secrets are introduced or existing secrets are rotated/migrated.
• Secret storage and runtime distribution mechanisms are being designed.
• Secret exposure response and revocation capability need verification.

Templates And Assets

• Secrets inventory template:
  • assets/secrets-inventory-template.csv

Inputs To Gather

• Secret inventory by owner, purpose, and environment.
• Storage and access architecture (vault/KMS/secret manager, runtime injection path).
• Rotation cadence, revocation requirements, and dependency constraints.
• Audit and compliance obligations for access and change tracking.