Apikeys Handler — Development skill for Claude Code
Rotate API keys and secrets after a breach.
How to install Apikeys Handler
Installs to ~/.claude/skills/codegobrrrr9-apikeys-handler-apikeys-handler/SKILL.md
mkdir -p ~/.claude/skills/codegobrrrr9-apikeys-handler-apikeys-handler && curl -fsSL https://raw.githubusercontent.com/codegobrrrr9/apikeys-handler/HEAD/commands/apikeys-handler.md -o ~/.claude/skills/codegobrrrr9-apikeys-handler-apikeys-handler/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Apikeys Handler does
description: Rotate API keys and secrets after a breach. Shows progress, or plans a rotation (dry run). Never reads or prints a secret value. allowed-tools: Bash(node:*), Bash(git:*)
- If
$ARGUMENTSis empty, runnode ${CLAUDE_PLUGIN_ROOT}/skills/apikeys-handler/scripts/apikeys-handler.js statusand quote it. If nothing is tracked yet, say so and ask which platform (Railway, .env files, Netlify, Cloudflare, Supabase) and which services were exposed. - Otherwise run `node ${C
Alternatives in Development
- Correction Handler — Correction 处理 Prompt 24k ★
- Breach Check — HIBP k-anonymity check on a password wordlist 4.5k ★
- Memory Gc — Inspect or rotate the autopilot ledger JSONL files (findings.jsonl, negatives.jsonl) 3.8k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Rotate CLI
Agent-first secrets rotation CLI. Local-first, zero servers. Built after the Vercel April 2026 breach.
Claude Secret Guard Kit
Block Claude Code from reading, echoing, or committing your secrets. Read-deny rules + shell filename guard +
Heeler Secrets Scan
Run Heeler secret scanning for a repository or staged changes. Use when comitting code or the user asks to det
Rotate Secrets
Scan the repo for hardcoded secrets and suggest 1Password/env-based alternatives
Codeword Silly Goose
A Claude skill that catches leaked secrets, refuses to repeat them, and calls you a silly goose until you rota
Jk Keys
Connect, check, or rotate an organization's API key
Related Agents
Secret Scanner
PYA specialist spawned by the /pya orchestrator. Finds hardcoded and leaked credentials in an untrusted reposi
Secret Purist
The paranoid sentinel of credential security. Use this agent to scan codebases and git history for leaked secr
Secret Guard
MUST be used whenever the user asks to scan for secrets, API keys, credentials, or tokens before a commit or i