sammyboi81

Secrets Management — Development skill for Claude Code

Development community

Keep credentials out of code and logs; detect, rotate, and shrink the blast radius.

How to install Secrets Management

Installs to ~/.claude/skills/sammyboi81-bulwark-mcp-secrets-management/SKILL.md

Terminal

mkdir -p ~/.claude/skills/sammyboi81-bulwark-mcp-secrets-management && curl -fsSL https://raw.githubusercontent.com/sammyboi81/bulwark-mcp/HEAD/skills/secrets-management.md -o ~/.claude/skills/sammyboi81-bulwark-mcp-secrets-management/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Secrets Management does

name: secrets-management description: Keep credentials out of code and logs; detect, rotate, and shrink the blast radius. tags: core, secrets, breach

Stolen credentials remain a leading cause of breaches; AI-assisted attackers also mine public repos, CI logs and AI-tool configs for keys within minutes of exposure.

Never commit secrets, including to private repos, test fixtures, notebooks, Docker layers, or .env files. Commit .env.example only.
Store in a secret manager (cloud KM

Alternatives in Development

Memory Gc — Inspect or rotate the autopilot ledger JSONL files (findings.jsonl, negatives.jsonl) 3.8k ★
Opencode Claude Auth — OpenCode plugin that uses your existing Claude Code credentials — no separate login needed 903 ★
Icpg Impact — /icpg-impact — Show Blast Radius 705 ★