secrets-management

Implement secure secrets management for CI/CD pipelines using Vault, AWS Secrets Manager, or native platform solutions. Use when handling sensitive credentials, rotating secrets, or securing CI/CD environments.

1.11x

Quality

56%

Does it follow best practices?

Impact

86%

1.11x

Average score across 3 eval scenarios

Securityby

Risky

Do not use without reviewing

Optimize this skill with Tessl

npx tessl skill review --optimize ./tests/ext_conformance/artifacts/agents-wshobson/cicd-automation/skills/secrets-management/SKILL.md

Evaluation results

100%

12%

Secure Deployment Pipeline with HashiCorp Vault

GitHub Actions Vault integration

Criteria

Without context

With context

Vault action version

100%

kv-v2 path format

100%

Secret masking

100%

GitHub environment scoping

100%

No hardcoded secrets

100%

VAULT_TOKEN reference

100%

Database credentials retrieved

100%

Payment API key retrieved

100%

Secrets requirements documented

100%

Main branch trigger

100%

57%

11%

Preventing Secret Leakage in a Development Repository

Secret scanning setup

Criteria

Without context

With context

TruffleHog in pre-commit

Docker invocation pattern

Commit blocking on failure

GitLab secret-scan job

100%

TruffleHog in CI

100%

allow_failure: false

100%

Security stage placement

100%

Hook executable

Installation documented

77%

100%

False positive guidance

100%

Migrating Kubernetes Workloads to Dynamic Secret Injection

Kubernetes External Secrets Operator

Criteria

Without context

With context

ESO apiVersion

100%

SecretStore kind

100%

ExternalSecret kind

100%

refreshInterval set

100%

creationPolicy Owner

100%

Correct secret target

100%

Both fields mapped

100%

AWS credentials action version

100%

No hardcoded AWS credentials

70%

100%

Production namespace

100%

Architecture documented

100%

Ownership model explained

100%

Repository: Dicklesworthstone/pi_agent_rust
Commit: 47823e3

Evaluated: about 1 month ago
Agent: Claude Code
Model: Claude Sonnet 4.6

Table of Contents

Secure Deployment Pipeline with HashiCorp Vault Preventing Secret Leakage in a Development Repository Migrating Kubernetes Workloads to Dynamic Secret Injection

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.