abzhaw/secrets-management
.agent/skills/secrets-management/SKILL.md
Vault patterns, .env.secrets, credential rotation, never-commit rules. Use when handling API keys, tokens, or any sensitive credentials in the Julia system.
development
Updated Mar 27, 2026
$ install --global
skillsauthnpx skillsauth add abzhaw/juliaz_agents secrets-managementInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
Security Scan Results
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
3
Scanners Passed
9
Scanners in report
Clean
TrivyContainer and dependency vulnerability scanner
95%
Clean
SemgrepStatic code analysis for vulnerabilities
95%
Clean
mcp-scan (Snyk)Model Context Protocol security validation
95%
Skipped
Snyk (dep)Open source security scanning
50%
Skipped
Socket.devSupply chain security analysis
50%
Skipped
VirusTotalMulti-engine malware detection
50%
Skipped
CrowdStrikeAdvanced threat intelligence
50%
Skipped
OSV-ScannerOpen Source Vulnerability database check
50%
Skipped
OWASP Dep-Check
50%
Last scanned: Mar 30, 2026, 12:12 PM57.4s1 file scanned
SKILL.md
- name:
- secrets-management
- description:
- Vault patterns, .env.secrets, credential rotation, never-commit rules. Use when handling API keys, tokens, or any sensitive credentials in the Julia system.
Secrets Management
Principles
- Never commit secrets — use
.gitignorereligiously - Rotate regularly — especially after any leak suspicion
- Least privilege — each service only gets the keys it needs
- Validate at startup — fail fast if a required key is missing
- Redact in logs — never log full key values
Julia's Secret Inventory
# .env.secrets (never committed)
OPENAI_API_KEY=sk-... # orchestrator + frontend
ANTHROPIC_API_KEY=sk-ant-... # cowork-mcp
TELEGRAM_BOT_TOKEN=... # openclaw
RAPHAEL_CHAT_ID=... # escalation target
DATABASE_URL=postgresql://... # backend (Docker internal)
Startup Validation
const REQUIRED_VARS = ['OPENAI_API_KEY', 'ANTHROPIC_API_KEY'];
for (const key of REQUIRED_VARS) {
if (!process.env[key]) {
console.error(`FATAL: Missing required env var: ${key}`);
process.exit(1);
}
}
Git Protection
# .gitignore — MUST contain:
.env.secrets
.env.local
*.key
*.pem
If a Secret is Leaked
- Immediately rotate the key (generate new one in provider dashboard)
- Update
.env.secretswith new value - Restart affected services:
pm2 restart all - Audit git history:
git log --all -S "old-key-prefix" - If committed: use
git filter-repoto scrub history
Credential Rotation Schedule
- API keys: every 90 days or on team member change
- DB passwords: every 180 days
- Telegram tokens: rotate if bot was ever exposed
Related Skills
abzhaw/thesis-tracker
development
VerifiedTrustedCommunity
Fortschrittsverfolgung der Masterarbeit. Wortanzahl pro Kapitel, Fertigstellungsgrad, fehlende Elemente, Deadlines. Haelt den Ueberblick.
SKILL.mdUpdated Mar 27, 2026
abzhaw/thesis-structure
development
VerifiedTrustedCommunity
Kapitelarchitektur und Gliederung der Masterarbeit. Verwaltet die Struktur, schlaegt vor wo Inhalte hingehoeren, validiert den logischen Fluss zwischen Kapiteln.
SKILL.mdUpdated Mar 27, 2026
abzhaw/session-synthesizer
tools
VerifiedTrustedCommunity
Konvertiert Protokolleinträge und Session-Logs in thesis-fähiges deutsches Narrativ. Transformiert Entwicklungsdokumentation in akademische Prosa.
SKILL.mdUpdated Mar 27, 2026
abzhaw/research-scout
research
VerifiedTrustedCommunity
Sucht und analysiert akademische Literatur. Findet relevante Papers, erstellt strukturierte Zusammenfassungen. Zitiert NIEMALS — schlaegt nur vor.
SKILL.mdUpdated Mar 27, 2026