What to do the moment a secret is exposed — pasted into chat, committed, logged, shown in a transcript or a screenshot. The secret is compromised; only revoking and rotating it helps. Turns it into one tracked task with an escalation, not a reminder repeated every session.
Install
npx skills add avelikiy/great_cto --skill secrets-rotationnpx skills add avelikiy/great_cto --skill secrets-rotation -a claude-code -gnpx skills add avelikiy/great_cto --skill secrets-rotation -a codex -ggemini skills install https://github.com/avelikiy/great_cto.git --path skills/secrets-rotationgh skill install avelikiy/great_cto secrets-rotationgit clone --depth 1 https://github.com/avelikiy/great_cto /tmp/avelikiy__great_cto
mkdir -p ~/.claude/skills ~/.agents/skills
cp -R /tmp/avelikiy__great_cto/skills/secrets-rotation ~/.claude/skills/secrets-rotation # Claude Code
cp -R /tmp/avelikiy__great_cto/skills/secrets-rotation ~/.agents/skills/secrets-rotation # Codex, Cursor, Gemini CLI, Copilot, OpenCode