secret-management-b942d9 — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited secret-management-b942d9 (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Activate when the user:
.env filesCall get_project_context to get a redacted overview of existing secrets, scopes, manifest status, and recent activity.
| Task | MCP Tool |
|---|---|
| Store a secret | set_secret with optional ttlSeconds, tags, description, env (superposition), rotationFormat |
| Retrieve a secret | get_secret — collapses superposition automatically |
| Check existence | has_secret — never reveals the value |
| Delete a secret | delete_secret |
| List all secrets | list_secrets — filter with tag, expired, stale, filter |
| Inspect metadata | inspect_secret — shows decay, entanglement, access history (no value) |
| Usage / optimization | analyze_secrets — JSON report on secret usage patterns |
get_secret, list_secrets, and related tools return JSON text payloads (not raw unwrapped strings) for predictable agent parsing.
import_dotenv to bulk-load from .env contentexport_secrets with format env or json, optional key/tag filtersStore per-environment values with the env parameter on set_secret:
set_secret(key="DB_URL", value="...", env="dev")set_secret(key="DB_URL", value="...", env="prod")get_secret collapses to the detected environment automaticallyLink secrets so rotating one updates the other:
entangle_secrets(sourceKey, targetKey) — bidirectional linkdisentangle_secrets(sourceKey, targetKey) — remove linkSecrets resolve through a cascade: project → team → org → global. Use the scope parameter to target a specific level.
description when storing secrets for discoverabilitytags to group related secrets (e.g., database, api, auth)ttlSeconds for credentials that expire (forces rotation awareness)generate_secret to create high-entropy values instead of inventing them~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.