Secrets Management For CI/CD

Installation

1. 1
   Make sure Claude is on your device and in your terminal.

   Skills load from ~/.claude/skills/ when Claude Code starts up — so you need it on your machine first. If you don't have it yet, install it once with the command below, then run claude in any terminal to verify.

   One-time setup

   Copy

   npm i -g @anthropic-ai/claude-code

   Already have it? Skip ahead.

2. 2
   Paste into Claude Code or into your terminal.

   Install

   Sign up to copy

   git clone ht•••••••••••••••••••••••••••••••••••• ••••••••••••••••••••• •• ••••• •• •••••••••••••••••••••••••••••••••••••••••••• •• •• •• ••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••• •••••••••••••••••••••••••••••••••••••••••••••

   Sign up free to reveal

   This copies the whole skill folder into ~/.claude/skills/secrets-management-wshobson/ — the SKILL.md plus any scripts, reference docs, or templates the skill ships with. Safe default: works for every skill.

   Faster alternative (instruction-only skills)

   Skips the clone and grabs only the SKILL.md file. Don't use this if the skill ships Python scripts, reference markdowns, or asset templates — they won't be downloaded and the skill will fail when it tries to load them.

   Quick install (SKILL.md only)

   Sign up to copy

   mkdir -p ~/.••••••••••••••••••••••••••••••••••••••••• •• •••• ••••• ••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••••• •• •••••••••••••••••••••••••••••••••••••••••••••••••••••

   Sign up free to reveal
3. 3
   Restart Claude Code.

   Quit and reopen Claude Code (or any other agent that loads from ~/.claude/skills/). New skills are picked up on startup.

4. 4
   Just ask Claude.

   Skills auto-activate when your request matches the skill's description — no slash command needed. Trigger phrases live in the skill's own frontmatter; you can read them in the “What this skill does” section above.

Prefer to read the source first? Open on GitHub.

When Claude uses it

Teaches Claude to inject and rotate credentials in CI/CD pipelines without hardcoding them, with working snippets for HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, and Google Secret Manager. Covers GitHub Actions and GitLab CI integration, Terraform secret lookups, the Kubernetes External Secrets Operator, and automated rotation via Lambda. Reach for it when storing API keys or database passwords, masking secrets in job logs, or adding pre-commit and CI secret scanning with TruffleHog.

What this skill does