secret-lifecycle-auditor
Secret lifecycle auditor: inventories every secret-shaped key/value across .env, k8s manifests, Vault configs, IAM refs, terraform. Per secret: age from git log -S, masked value (first-8/last-4), reachability-check against installed dependencies, type guess from key prefix. LLM judges rotation cadence and emits prioritized rotate-now / rotate-soon / remove-dead list. Read-only. Audience: Senior. Trigger: /secret-lifecycle
Pinned to revision 29d23a8cf80e, so it is the text this page describes rather than whatever the author pushed since.
Files
- skills/secret-lifecycle-auditor/SKILL.md
- skills/secret-lifecycle-auditor/README.md
- skills/secret-lifecycle-auditor/scripts/secret-census.ps1
Every link opens the file at its source, pinned to the revision this page describes.