Secrets Hygiene

SkillAI & models

Audits which skills have access to secrets, flags stale or unrotated credentials, and prompts rotation. Use weekly to keep credentials clean.

Instructions available. Your AI can read the instructions. Execution depends on the setup they require.

Account requirements not reviewed. Check the skill instructions before use; ahel provides instructions and does not run this skill.

Add ahel to your AI once: Claude, ChatGPT, Cursor, Claude Code or Codex. Then ask it to use this.

Then ask your AI: use the Secrets Hygiene skill

What this skill tells your AI

The instructions your AI receives, as published by archieindian/openclaw-superpowers in skills/openclaw-native/secrets-hygiene/SKILL.md and read by ahel’s review.

State file: ~/.openclaw/skill-state/secrets-hygiene/state.yaml

Credentials you forgot about are credentials that will leak.

When to Use

On Monday 9am cron wakeup
When adding or removing a skill that uses credentials
After any suspected security incident

The Audit Process

Step 1: Inventory

List all secrets currently configured in OpenClaw (env vars, config files, keychain entries referenced by installed skills). For each, record: name, which skills access it, when it was last rotated (if known).

Step 2: Flag Stale Secrets

A secret is stale if:

Last rotated more than 90 days ago (or unknown rotation date)
The skill that uses it is no longer installed
It grants broader access than the skill needs

Step 3: Report

Send a summary:

Secrets Audit — [date]
[N] secrets tracked
[N] flagged for rotation: [names]
[N] orphaned (skill removed): [names]
Action needed: [yes/no]

Step 4: Update State

Write last_audit_at, updated tracked_secrets list, flagged_count, orphaned_count to state file.

Cron Wakeup Behavior

On Monday 9am wakeup:

Read state; if last_audit_at is within the last 6 days, skip
Otherwise run the audit and update state

Signals

GitHub stars: 72
Forks: 14
Last commit: May 2026

Advanced

Item type: skill
Key: secrets-hygiene
Source: github.com/archieindian/openclaw-superpowers

github.com/archieindian/openclaw-superpowers