Kalypsokichu-code

Rotate Secrets — Development skill for Claude Code

Development community

Scan the repo for hardcoded secrets and suggest 1Password/env-based alternatives.

How to install Rotate Secrets

Installs to ~/.claude/skills/kalypsokichu-code-kalypso-claude-workflow-rotate-secrets/SKILL.md

Terminal
mkdir -p ~/.claude/skills/kalypsokichu-code-kalypso-claude-workflow-rotate-secrets && curl -fsSL https://raw.githubusercontent.com/Kalypsokichu-code/kalypso-claude-workflow/HEAD/commands/rotate-secrets.md -o ~/.claude/skills/kalypsokichu-code-kalypso-claude-workflow-rotate-secrets/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Rotate Secrets does


description: Scan the repo for hardcoded secrets and suggest 1Password/env-based alternatives model: sonnet allowed-tools:

  • Read
  • Grep
  • Glob
  • Bash(rg:*)
  • Bash(git log:*)
  • Bash(git ls-files:*)

Rotate Secrets

Scan the current project for hardcoded secrets and suggest how to rotate them. Do not modify files.

Steps

  1. Scan using rg (ripgrep) with these patterns (respect .gitignore):
    • API key formats: sk-[a-zA-Z0-9]{20,}, AIza[0-9A-Za-z_-]{35}, `ghp_

Alternatives in Development

  • Memory Gc — Inspect or rotate the autopilot ledger JSONL files (findings.jsonl, negatives.jsonl) 3.8k ★
  • Agentists Quickstart Deprecated — Opinionated DevPod workspace configs for agentic engineering — Claude Code, shared secrets, VS Code extensions 61 ★
  • Rotate Creative — Pause fatigued ads and ship fresh creative variants in their place 48 ★

Full documentation available on GitHub

View Source Repository