The Agent Skills Directory

[SAFE]: The skill is a set of defensive instructions and best practices for secret management. It proactively addresses security risks such as credential exposure in source control, RCE through dynamic script generation, and supply chain integrity.
[SAFE]: Instructions explicitly advocate for the use of security tools like Gitleaks, TruffleHog, and SOPS, and prioritize modern identity patterns like SPIFFE/SVID and OIDC over static keys.
[SAFE]: The allowed-tools list and agent configuration are scoped to standard development operations required for auditing and updating configuration files, with strong warnings against exposing sensitive values during these processes.

manage-secrets