About

Imported from borghei/claude-skills (engineering/secrets-vault-manager/SKILL.md). Install upstream with npx skills add borghei/claude-skills --skill secrets-vault-manager. Copyright stays with the author (MIT + Commons Clause).

Secrets Vault Manager

Name: secrets-vault-manager
Author: borghei

Category: Engineering Domain: Secrets Management & Security

Overview

The Secrets Vault Manager skill provides tools for generating HashiCorp Vault configurations, planning and scheduling secret rotation cycles, and analyzing vault audit logs for suspicious access patterns. Essential for teams managing secrets at scale.

Clarify First

Before generating configs or plans, confirm these inputs. If any is unknown or vague, ASK — do not assume:

Task — config generation / rotation planning / audit-log analysis (selects the script and the entire workflow)
Environment & secrets engines — e.g. production + kv/database/transit (--env, --secrets-engines; shapes the generated HCL)
Secrets inventory & classification — Critical/High/Medium/Low per secret (drives rotation frequencies and the schedule)

Stop rule: ask only the 2-3 that most change the output. If the user says "just draft it," proceed and list your assumptions at the top of the artifact.

Quick Start

# Generate Vault configuration
python scripts/vault_config_generator.py --env production --secrets-engines kv,database,transit

# Plan secret rotation schedule
python scripts/rotation_planner.py --inventory secrets_inventory.json

# Analyze vault audit logs
python scripts/audit_log_analyzer.py --log-file vault_audit.log --format json

Tools Overview

Tool	Purpose	Key Flags
`vault_config_generator.py`	Generate HashiCorp Vault configurations	`--env`, `--secrets-engines`, `--auth-methods`
`rotation_planner.py`	Plan and schedule secret rotation cycles	`--inventory`, `--policy`, `--format`
`audit_log_analyzer.py`	Analyze vault audit logs for anomalies	`--log-file`, `--time-range`, `--format`

Workflows

Initial Vault Setup

Define environment and required secrets engines
Run vault_config_generator.py to generate HCL configs
Review and customize generated configurations
Apply via Terraform or Vault CLI

Secret Rotation Planning

Create secrets inventory (JSON)
Run rotation_planner.py to generate schedule
Review rotation plan and adjust frequencies
Implement automated rotation where possible

Audit Log Investigation

Export vault audit logs
Run audit_log_analyzer.py for anomaly detection
Review flagged events
Investigate suspicious access patterns

Reference Documentation

Secrets Management Guide - Best practices, rotation policies, and compliance requirements

Common Patterns

Secret Classification

Critical: Database credentials, API master keys, encryption keys
High: Service account tokens, OAuth secrets, TLS certificates
Medium: Third-party API keys, webhook secrets
Low: Public API keys, non-sensitive configuration

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

yaml

targets:
  - https://api.opensmartroute.ai/api/v1/registry/borghei-claude-skills-secrets-vault-manager/manifest   # or paste the manifest below

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

borghei-claude-skills-secrets-vault-manager.ocm.jsonjson

{
  "ocm": "1",
  "id": "borghei-claude-skills-secrets-vault-manager",
  "kind": "skill",
  "name": "secrets-vault-manager",
  "description": "This skill should be used when the user asks to \"generate Vault configurations\", \"plan secret rotation\", \"analyze vault audit logs\", \"manage secrets lifecycle\", or \"set up HashiCorp Vault\".",
  "publisher": "borghei",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "secrets",
      "vault",
      "hashicorp",
      "rotation",
      "audit",
      "security",
      "skills-sh"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "This skill should be used when the user asks to \"generate Vault configurations\", \"plan secret rotation\", \"analyze vault audit logs\", \"manage secrets lifecycle\", or \"set up HashiCorp Vault\"."
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "skills.sh",
      "repository": "https://github.com/borghei/claude-skills",
      "path": "engineering/secrets-vault-manager/SKILL.md",
      "ref": "HEAD",
      "url": "https://github.com/borghei/claude-skills/blob/HEAD/engineering/secrets-vault-manager/SKILL.md",
      "key": "borghei/claude-skills/engineering/secrets-vault-manager/SKILL.md"
    },
    "license": "MIT + Commons Clause"
  },
  "instructions": "# Secrets Vault Manager\n\n> **Category:** Engineering\n> **Domain:** Secrets Management & Security\n\n## Overview\n\nThe **Secrets Vault Manager** skill provides tools for generating HashiCorp Vault configurations, planning and scheduling secret rotation cycles, and analyzing vault audit logs for suspicious access patterns. Essential for teams managing secrets at scale.\n\n## Clarify First\n\nBefore generating configs or plans, confirm these inputs. If any is unknown or vague, ASK — do not assume:\n\n- [ ] **Task** — config generation / rotation planning / audit-log analysis (selects the script and the en",
  "cost": {
    "context_tokens": 725
  }
}

Fetch it by URL: GET /api/v1/registry/borghei-claude-skills-secrets-vault-manager/manifest?version=1.0.0

Reviews

Star ratings from people who tried it. One review per account; edit yours any time.

No reviews yet. Install it, try it, and be the first to rate it.