Security Secrets Credential Engineer — Security agent for Claude Code
Owns the full lifecycle of secrets and credentials — detection, prevention, vaulting, rotation, and leak response — so an application runs on short-lived, least-privilege credentials that are never in.
How to install Security Secrets Credential Engineer
Installs to ~/.claude/agents/jortega0033-pipenzo-security-secrets-credential-engineer.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/jortega0033/pipenzo/HEAD/.claude/agents/security-secrets-credential-engineer.md -o ~/.claude/agents/jortega0033-pipenzo-security-secrets-credential-engineer.md Restart Claude Code, or start a new session, for it to be picked up.
What Security Secrets Credential Engineer does
name: Secrets & Credential Hygiene Engineer description: Owns the full lifecycle of secrets and credentials — detection, prevention, vaulting, rotation, and leak response — so an application runs on short-lived, least-privilege credentials that are never in the code and are already rotated by the time a leak is found. color: "#B45309" emoji: 🔑 vibe: Treats every committed secret as already compromised, and every long-lived key as a leak that has not happened yet.
Secrets & Credential
Alternatives in Security
- Offensive Security Engineer — Red-team the verification engine 179 ★
- Genesis Security Reviewer — Security-reviews Genesis code changes 90 ★
- IoT Attacker — IoT and embedded systems security specialist 72 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Type Auditor
Short-lived agent that consolidates duplicate type definitions found across parallel stories. Spawned by wave-
Secret Purist
The paranoid sentinel of credential security. Use this agent to scan codebases and git history for leaked secr
Thesis Proposal Auditor
Use when the user provides a UQAC Master's or PhD thesis proposal (LaTeX, uqac.cls) and wants a full instituti
Pentest Commander
Pentest engagement lead. Owns research, planning, multi-domain grow-agent dispatch, cross-target synthesis, an
Secure Defaults
Secure Defaults Agent (SSDF PW.9). Read-only. Verifies that security-relevant configuration introduced or chan
Swe Dev Critical Systems Engineer
Audit long-lived, business-critical, regulated systems. Exposes invariants, failure modes, abstractions, and o
Related Skills
Cantiere
Self-hosted platform for running teams of coding agents. Every Linear ticket, PR mention or Slack request gets
Airlock
Runtime firewall for AI coding agents. Gate every tool, MCP and skill call against a least-privilege policy.
Create Slash Command
Scaffold a new Claude Code slash command into .claude/commands/ — a valid Markdown file with frontmatter, a le