How long does the integration take?

Change one base URL in an OpenAI-compatible client, or install the Python or TypeScript SDK; the quickstart routes a first request in a few minutes.

Will this lock us into another vendor?

No. The router is Apache-2.0 open source, your provider keys stay yours, and the API is OpenAI-compatible, so leaving is a change of base URL.

What happens when a provider fails?

The router falls back to the next model your policy allows and records the fallback in the trace, so an outage costs a retry, not an incident.

integrating-secrets-managers - Skill

Name: integrating-secrets-managers
Author: jeremylongshore

Imported from jeremylongshore/tons-of-skills-marketplace (skills/.curated/integrating-secrets-managers/SKILL.md). Install upstream with npx skills add jeremylongshore/tons-of-skills-marketplace --skill integrating-secrets-managers. Copyright stays with the author (MIT).

Integrating Secrets Managers

Overview

Integrate secrets management platforms (HashiCorp Vault, AWS Secrets Manager, GCP Secret Manager, Azure Key Vault) into applications and infrastructure. Generate authentication configurations, access policies, secret rotation schedules, and application code patterns for secure credential retrieval at runtime.

Prerequisites

Secrets manager instance running and accessible (Vault server, AWS Secrets Manager enabled)
Cloud provider CLI authenticated or Vault CLI installed (vault, aws, gcloud, az)
IAM/policy permissions to create secrets and access policies
Understanding of which application components need which secrets
Network connectivity between application workloads and the secrets manager endpoint

Instructions

Inventory all secrets currently in use: database credentials, API keys, TLS certificates, OAuth tokens
Select the secrets manager based on infrastructure: Vault for multi-cloud, AWS Secrets Manager for AWS-native, GCP Secret Manager for GCP
Create the secrets store structure: organize by application, environment, and secret type (e.g., apps/myapp/prod/database)
Generate access policies with least-privilege: each application identity gets read access only to its own secrets
Configure authentication method: Kubernetes service account (Vault K8s auth), IAM role (AWS), Workload Identity (GCP)
Implement secret retrieval in the application: SDK call at startup, sidecar injection (Vault Agent), or CSI driver mount
Set up automatic secret rotation: define rotation lambda/function, rotation interval, and notification on rotation events
Remove hardcoded secrets from code and configuration files; replace with secret references
Add monitoring: alert on secret access failures, rotation failures, and unauthorized access attempts

Output

Vault policies (HCL) or IAM policies (JSON) for secret access
Authentication configuration (Vault K8s auth, AWS IAM role, GCP Workload Identity)
Application code snippets for secret retrieval (SDK-based or environment variable injection)
Secret rotation configuration (AWS rotation Lambda, Vault dynamic secrets)
Kubernetes External Secrets Operator or CSI SecretProviderClass manifests

Error Handling

Error	Cause	Solution
`permission denied` on secret read	Policy does not grant access to the requested path	Update Vault policy or IAM policy to include the specific secret ARN/path
`Vault token expired`	Authentication token TTL exceeded	Configure token renewal or use short-lived tokens with auto-renewal via Vault Agent
`Secret not found`	Secret path/name incorrect or secret deleted	Verify the secret exists with `vault kv get` or `aws secretsmanager describe-secret`
`Rotation failed`	Rotation function lacks permissions or target service unreachable	Check rotation function logs; verify it has permissions to update credentials on the target service
`Connection refused to Vault`	Vault server down or network policy blocking access	Verify Vault is running and healthy; check network policies/firewalls between application and Vault

Examples

"Integrate HashiCorp Vault with a Kubernetes deployment using the Vault Agent sidecar injector to inject database credentials as environment variables."
"Set up AWS Secrets Manager with automatic rotation every 30 days for an RDS PostgreSQL password, with a Lambda rotation function."
"Replace all hardcoded API keys in the application with GCP Secret Manager references using Workload Identity for authentication."

Resources

HashiCorp Vault: https://developer.hashicorp.com/vault/docs
AWS Secrets Manager: https://docs.aws.amazon.com/secretsmanager/
GCP Secret Manager: https://cloud.google.com/secret-manager/docs
External Secrets Operator: https://external-secrets.io/
Secrets management best practices: https://developer.hashicorp.com/vault/tutorials/recommended-patterns

Install integrating-secrets-managers and it becomes one more candidate the router can pick - when it fits.

A listing is a routing target with a manifest: what it does, which domains it covers, what it costs and who publishes it. Once installed it sits beside your own models and tools, is scored like any other candidate for each request, and shows up in the trace when it wins. Ratings come from workspaces that installed it, one per account.

{ "ocm": "1", "id": "jeremylongshore-tons-of-skills-marketplace-integrating-s-e7b216", "kind": "skill", "name": "integrating-secrets-managers", "description": "Manage this skill enables AI assistant to seamlessly integrate with various secrets managers like hashicorp vault and aws secrets manager. it generates configurations and setup code, ensuring best practices for secure credential management. use this skill when... Use when appropriate context detected. Trigger with relevant phrases based on skill purpose.", "publisher": "jeremylongshore", "version": "1.0.0", "capabilities": { "domains": [ "coding", "observability" ], "tags": [ "skill-md", "devops", "aws", "integrating-secrets", "skills-sh" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Manage this skill enables AI assistant to seamlessly integrate with various secrets managers like hashicorp vault and aws secrets manager. it generates configurations and setup code, ensuring best practices for secure credential management. use this skill when... Use when appropriate context detected. Trigger with relevant phrases based on skill purpose." ], "primary": false, "metadata": { "source": { "provider": "skills.sh", "repository": "https://github.com/jeremylongshore/tons-of-skills-marketplace", "path": "skills/.curated/integrating-secrets-managers/SKILL.md", "ref": "HEAD", "url": "https://github.com/jeremylongshore/tons-of-skills-marketplace/blob/HEAD/skills/.curated/integrating-secrets-managers/SKILL.md", "key": "jeremylongshore/tons-of-skills-marketplace/skills/.curated/integrating-secrets-managers/SKILL.md" }, "compatibility": "Designed for Claude Code", "allowed_tools": [ "Read,", "Write,", "Edit,", "Grep,", "Glob,", "Bash(cmd:*)" ], "license": "MIT" }, "instructions": "# Integrating Secrets Managers\n\n## Overview\n\nIntegrate secrets management platforms (HashiCorp Vault, AWS Secrets Manager, GCP Secret Manager, Azure Key Vault) into applications and infrastructure. Generate authentication configurations, access policies, secret rotation schedules, and application code patterns for secure credential retrieval at runtime.\n\n## Prerequisites\n\n- Secrets manager instance running and accessible (Vault server, AWS Secrets Manager enabled)\n- Cloud provider CLI authenticated or Vault CLI installed (`vault`, `aws`, `gcloud`, `az`)\n- IAM/policy permissions to create secre", "cost": { "context_tokens": 1001 } }

integrating-secrets-managers

About

Integrating Secrets Managers

Overview

Prerequisites

Instructions

Output

Error Handling

Examples

Resources

Install integrating-secrets-managers and it becomes one more candidate the router can pick - when it fits.

What it costs to adopt - in engineering time.

One base URL

No vendor lock-in

Failover built in

Use it

Manifest

Reviews