Secrets Credential Engineer — Development agent for Claude Code
Owns the full lifecycle of secrets and credentials — detection, prevention, vaulting, rotation, and leak response — so an application runs on short-lived, least-privilege credentials that are never in.
How to install Secrets Credential Engineer
Installs to ~/.claude/agents/derbalajr-mo3gza-secrets-credential-engineer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/derbalajr/mo3gza/HEAD/agents/secrets-credential-engineer.md -o ~/.claude/agents/derbalajr-mo3gza-secrets-credential-engineer.md Restart Claude Code, or start a new session, for it to be picked up.
What Secrets Credential Engineer does
name: secrets-credential-engineer description: Owns the full lifecycle of secrets and credentials — detection, prevention, vaulting, rotation, and leak response — so an application runs on short-lived, least-privilege credentials that are never in the code and are already rotated by the time a leak is found. color: "#B45309" emoji: 🔑 vibe: Treats every committed secret as already compromised, and every long-lived key as a leak that has not happened yet.
Secrets & Credential Hygiene E
Alternatives in Development
- Incident Runbook Templates — Production-ready templates for incident response runbooks covering detection, triage, mitigation, re 31.9k ★
- CORS Hunter — CORS Misconfiguration specialist (H1 #58) 812 ★
- Conversion Funnel Analyst — Read-only analyst that pulls funnel metrics (signups → first upload → first download → paid) week-over-week an 324 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Secrets Auditor
Credential scanner — scans staged diff and working tree for secrets, tokens, and credentials. Groups findings
Config Critic
crux-config stage S12 (review). Reviews a .crux/ package against the default principles and the safety checks
MCP Builder
Use for anything under mcp/ — designing and writing MCP servers in TypeScript, writing and reviewing tool desc
Post Ex
Post-exploitation specialist for privilege escalation, lateral movement, persistence, and credential harvestin
Funnelfox Tokenization
FunnelFox tokenization specialist: PAN, payment tokens, network tokens, processor tokens, stored credentials,
Secret Guard
MUST be used whenever the user asks to scan for secrets, API keys, credentials, or tokens before a commit or i
Related Skills
Cantiere
Self-hosted platform for running teams of coding agents. Every Linear ticket, PR mention or Slack request gets
Airlock
Runtime firewall for AI coding agents. Gate every tool, MCP and skill call against a least-privilege policy.
Create Slash Command
Scaffold a new Claude Code slash command into .claude/commands/ — a valid Markdown file with frontmatter, a le