Imported from V4N1LLA/Eunhye_Hymn (skills/secrets-rotation-auditor/SKILL.md). Install upstream with npx skills add V4N1LLA/Eunhye_Hymn --skill secrets-rotation-auditor. Copyright stays with the author.

Secrets Rotation Auditor

Name: secrets-rotation-auditor
Author: V4N1LLA

Use this skill to perform periodic secret audit cycles and track follow-up actions.

Execute workflow

Run secret rotation audit script for core staging secrets.
Include mobile release secrets when requested.
Classify findings into PASS, STALE, MISSING.
Run secrets-rotation-cycle.ps1 for repeatable logging and decision tracking.
Propose or execute secret sync steps when policy allows.
Record remediation outcomes in docs.

Read references/commands.md for command templates.

Enforce security policy

Never print or store raw secret values.
Record only status and age evidence.
Treat MISSING as blocking for related workflows.
Treat STALE as rotate-now when above policy threshold.

Sync documents when changed

docs/SECRETS_MANAGEMENT.md
docs/runbook.md
infra/aws/README.md
docs/secrets-rotation-log.md
docs/changelog-dev.md

Return output

Always return:

audit scope
stale/missing summary
remediation actions performed or pending
docs updated

{ "ocm": "1", "id": "v4n1lla-eunhye-hymn-secrets-rotation-auditor", "kind": "skill", "name": "secrets-rotation-auditor", "description": "Audit and drive secret rotation hygiene for Eunhye Hymn staging/release operations. Use when Codex checks stale or missing GitHub Actions secrets, runs secret audit scripts, and updates remediation logs or security docs.", "publisher": "V4N1LLA", "version": "1.0.0", "capabilities": { "domains": [ "general" ], "tags": [ "skill-md", "github" ], "languages": [ "en" ] }, "quality_prior": 0.6, "examples": [ "Audit and drive secret rotation hygiene for Eunhye Hymn staging/release operations. Use when Codex checks stale or missing GitHub Actions secrets, runs secret audit scripts, and updates remediation logs or security docs." ], "primary": false, "metadata": { "source": { "provider": "github", "repository": "https://github.com/V4N1LLA/Eunhye_Hymn", "path": "skills/secrets-rotation-auditor/SKILL.md", "ref": "50efa4cd137d922c39a91f6476ee46e071656e69", "url": "https://github.com/V4N1LLA/Eunhye_Hymn/blob/50efa4cd137d922c39a91f6476ee46e071656e69/skills/secrets-rotation-auditor/SKILL.md", "key": "V4N1LLA/Eunhye_Hymn/skills/secrets-rotation-auditor/SKILL.md" } }, "instructions": "# Secrets Rotation Auditor\n\nUse this skill to perform periodic secret audit cycles and track follow-up actions.\n\n## Execute workflow\n\n1. Run secret rotation audit script for core staging secrets.\n2. Include mobile release secrets when requested.\n3. Classify findings into `PASS`, `STALE`, `MISSING`.\n4. Run `secrets-rotation-cycle.ps1` for repeatable logging and decision tracking.\n5. Propose or execute secret sync steps when policy allows.\n6. Record remediation outcomes in docs.\n\nRead `references/commands.md` for command templates.\n\n## Enforce security policy\n\n- Never print or store raw secret v", "cost": { "context_tokens": 263 } }

secrets-rotation-auditor

About

Secrets Rotation Auditor

Execute workflow

Enforce security policy

Sync documents when changed

Return output

Use it

Manifest

Reviews