This Claude skill provides comprehensive HashiCorp Vault secrets management, enabling AI agents to securely interact with sensitive credentials, manage access policies, and automate PKI certificate workflows. It features robust safety controls, including progressive disclosure and mandatory confirmations for write operations, to ensure secure and efficient DevOps and security automation while minimizing context window usage.
Use Cases
Automated Secret Rotation: Securely updating and managing lifecycle transitions for database credentials and API keys within HashiCorp Vault.
Policy Auditing and Management: Reviewing and modifying Vault access policies to maintain a zero-trust security posture and ensure least-privilege access.
PKI Infrastructure Automation: Streamlining the issuance, lookup, and revocation of SSL/TLS certificates directly through the Vault PKI secrets engine.
Secure Credential Retrieval: Providing DevOps and security agents with authorized, temporary access to environment-specific secrets for deployment and troubleshooting.
name
vault-secrets
description
HashiCorp Vault secrets management
version
1.0.0
allowed-tools
[Bash, Read]
Vault Secrets Skill
Overview
HashiCorp Vault secrets management with critical safety controls. 90%+ context savings via progressive disclosure.
Requirements
Vault CLI installed
VAULT_ADDR environment variable
VAULT_TOKEN or authentication method configured
Tools (Progressive Disclosure)
Secret Operations
Tool
Description
Confirmation
kv-get
Read secret
Yes
kv-put
Write secret
REQUIRED
kv-delete
Delete secret
REQUIRED
kv-list
List secrets at path
No
Authentication
Tool
Description
token-lookup
Look up current token
auth-list
List auth methods
login
Authenticate to Vault
Policies
Tool
Description
policy-list
List policies
policy-read
Read policy
PKI
Tool
Description
Confirmation
pki-issue
Issue certificate
Yes
pki-revoke
Revoke certificate
REQUIRED
BLOCKED Operations
Tool
Status
operator seal
BLOCKED
operator step-down
BLOCKED
secrets disable
BLOCKED
Security
⚠️ NEVER log or display secret values
⚠️ All write/delete operations require confirmation
⚠️ Operator commands are BLOCKED
