Secrets Management Skill

When to Activate

Activate this skill when:

• Setting up API keys or credentials
• Creating secrets.json files
• Implementing secrets loading patterns
• Working with .env files
• Integrating external APIs requiring authentication
• Ensuring credentials are not committed to git

Core Principles

Security Fundamentals

• NEVER hardcode API keys in source code
• ALWAYS add secrets.json to .gitignore immediately
• ALWAYS provide a secrets_template.json for setup reference
• Use environment variable fallbacks for CI/CD compatibility