This skill as a file
$7 one payment, yours forever
- Download right after checkout, keep it for good
- Paste it into ChatGPT, Claude, Gemini or any AI chat, free plans included
- 30-day money-back guarantee
Nikodem - Secrets Management Engineer AI Skill
$7.00
Skip to product information
Nikodem - Secrets Management Engineer AI Skill
Eliminate static secrets: find the sprawl, move to short-lived and federated credentials, and make rotation something that actually happens.
$7.00
this skill
one payment
yours forever
Complete skill package instant downloadnikodem-secrets-management-workload-identity.md
Unlimited
Get this and 2,500+ more with Unlimited
$9/mo
Connect your AI once and every skill, prompt and agent loads when you ask. Unlimited also includes the AI CRM your Claude or ChatGPT can run.
AI CRM includedThis skill$7once, this skill only
Unlimited$9/mothis + 2,500+ more + AI CRM, first 7 days free
Pay once, keep foreverInstant download30-day money-back guarantee
As featured onProduct HuntFazierKittyLaunch
Secure checkout by Shopify
Trademarks of their respective owners. KissMySkills is not affiliated with or endorsed by them.
Ask Nikodem something hard.
We found an AWS key in a public repo. Handle this properly and stop it happening again.
CLAUDE · AS NIKODEM, SECRETS MANAGEMENT ENGINEER
Nikodem returns the immediate rotate, invalidate and hunt-for-use response with the history purge caveat, the sprawl discovery plan across every store that holds text, the target architecture with a secret store and OIDC federation so CI holds no static key, the rotation design including the credentials that currently cannot be rotated, and the scanning gates with tuning to keep developers using them.
Or have every skill inside your AI.
Questions before you buy? A person answers, usually the same day: hello@kissmyskills.com
// the file itself
Read it before you buy it.
The first lines of the file your AI will read, exactly as delivered. Nothing rewritten for the page.
Use the name
Once the file is loaded, talk to it by name: “Serge, check this page.” That is what the name is for. It also keeps several skills apart in one chat.
Once the file is loaded, talk to it by name: “Serge, check this page.” That is what the name is for. It also keeps several skills apart in one chat.
// the skill your AI runs on
You are Nikodem, a Secrets Management and Workload Identity Engineer who replaces static cloud keys in CI with OIDC federation and pins the trust policy to the full subject claim. You have been activated to find the sprawl and make credentials short-lived.
// what's inside
What's inside this skill
- Secret sprawl discovery and CI scanning with tuned signal
- Vault and cloud secret store policy and dynamic credentials
- Workload identity federation, OIDC keyless CI, SPIFFE and IRSA
- Rotation, break-glass and the post-leak rotate-and-hunt playbook
Platform and security teams with cloud keys in CI, secrets in repos, and a rotation policy nobody has ever executed.
// two ways to get it
Buy this file, or open the whole library.
Every skill, prompt and agent, inside your chat
$9/mo cancel anytime, or $59 a year
- All 2,500+ files in the library, loaded the moment you ask
- Nothing to download or paste: connect once in Claude, ChatGPT, Claude Code or Cursor
- Works on every Claude plan, free included · 30-day money-back guarantee on the first charge
Subscribers can still buy single files and keep them after they cancel.
// ask your assistant
Or let your AI set up this skill for you.
Go to kissmyskills.com/pages/for-ai-agents and set up the "Nikodem - Secrets Management Engineer AI Skill" skill (handle: nikodem-secrets-management-workload-identity) for me
Paste it into Claude, ChatGPT, Claude Code, Cursor or Codex. Your AI walks you through connecting KissMySkills (about 3 minutes, 7-day free trial) and loads the skill. What your AI will read →
What you're actually buying
Drop Nikodem into Claude and get a secrets engineer whose goal is that the credential you are trying to protect stops existing.
Nikodem owns machine identity and the secrets that should not be there: secret sprawl discovery across repositories, CI logs, container images, config maps, wikis and ticketing systems, scanning in pre-commit and CI with the false-positive problem handled, centralised secret stores including HashiCorp Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager and CyberArk with auth methods, policy design and dynamic short-lived credentials, workload identity federation and OIDC-based keyless authentication so CI never holds a static cloud key, SPIFFE and SPIRE, Kubernetes service accounts, IRSA and pod identity, mTLS and service mesh identity, rotation that actually happens including the credential three systems hardcode, break-glass credential storage, database and third-party credential brokering, the difference between encrypting a secret and controlling access to it, and the post-leak playbook of rotate, invalidate, hunt for use and purge history.
What you get
- →Secret sprawl discovery and CI scanning with tuned signal
- →Vault and cloud secret store policy and dynamic credentials
- →Workload identity federation, OIDC keyless CI, SPIFFE and IRSA
- →Rotation, break-glass and the post-leak rotate-and-hunt playbook
📄 nikodem-secrets-management-workload-identity.skill
Under 2 min install
Works with Claude, ChatGPT & any AI chat
How to install
Download the .skill package, open Claude, paste SKILL.md into your Project Instructions or system prompt, describe your requirement, and Nikodem builds the answer. Includes a full worked example so you see exactly what you get.
// how to install
Under 2 minutes
Four steps. Any AI chat.
- 01Download the file
After checkout, the download link lands in your inbox. Save the file anywhere on your device.
- 02Open your AI chat
Claude, ChatGPT, Gemini, Grok, or Copilot - whichever one you already use.
- 03Paste the file contents
Drop it into the system prompt, Project instructions, or custom instructions field.
- 04Start working
Your AI is now configured as a specialist. Ask it anything inside its domain.
No technical knowledge required.
With Unlimited there is nothing to download. Connect your AI once, then just ask: "Load Nikodem from KissMySkills."
// faq
Questions about this product
What does the Nikodem skill do?+
Eliminate static secrets: find the sprawl, move to short-lived and federated credentials, and make rotation something that actually happens. Load it once into Claude Projects and you get a configured Secrets Management & Workload Identity Engineer without re-explaining context at the start of every session. This skill is for authorized, defensive security work only. Validate findings in your own environment, follow your rules of engagement and written authorization, and confirm current framework, vendor, and regulatory specifics before you act on them.
How do I install this skill file?+
Download the .skill package (it contains SKILL.md), paste the contents into Claude Projects Instructions or your AI's system prompt, add your own context and start your first session. Works with Claude, ChatGPT, or any AI chat that accepts system prompts.
Which AI tools does this skill work with?+
Works with Claude (recommended), ChatGPT, Gemini, Perplexity and Copilot, and any AI chat that accepts system prompts. Claude Projects gives the best results.
How is this different from using Claude without the Nikodem skill?+
Without a skill file your AI starts every session as a general assistant. With Nikodem loaded it applies Secrets Management & Workload Identity Engineer methodology from the first message, with consistent quality every time. This skill is for authorized, defensive security work only. Validate findings in your own environment, follow your rules of engagement and written authorization, and confirm current framework, vendor, and regulatory specifics before you act on them.