ReddRadar
Agent skill
api-key-manager
API key generation, rotation, and management system
Install this agent skill to your Project
npx add-skill https://github.com/a5c-ai/babysitter/tree/main/library/specializations/sdk-platform-development/skills/api-key-manager
SKILL.md
API Key Manager Skill
Overview
This skill implements comprehensive API key management including secure generation, rotation policies, usage tracking, and quota enforcement.
Capabilities
- Generate cryptographically secure API keys
- Implement key rotation with grace periods
- Track key usage and enforce quotas
- Support key scoping and permissions
- Configure key prefix patterns for identification
- Implement key revocation and blacklisting
- Support multiple key types (test, live)
- Generate key hashes for secure storage
Target Processes
- Authentication and Authorization Patterns
- Developer Portal Implementation
- Platform API Gateway Design
Integration Points
- Key management systems (HashiCorp Vault)
- Rate limiting middleware
- Usage analytics systems
- Developer portal UIs
- API gateway key validation
Input Requirements
- Key format requirements
- Scoping/permission model
- Rotation policy
- Quota definitions
- Storage security requirements
Output Artifacts
- Key generation service
- Key validation middleware
- Rotation management system
- Usage tracking integration
- Quota enforcement rules
- Admin management API
Usage Example
skill:
name: api-key-manager
context:
keyFormat:
prefix: "sk_"
testPrefix: "sk_test_"
livePrefix: "sk_live_"
length: 32
rotation:
enabled: true
gracePeriod: "7d"
scopes:
- read
- write
- delete
quotas:
default: 1000
premium: 10000
Best Practices
- Use cryptographically secure random generation
- Prefix keys to indicate type (test/live)
- Store only hashed keys in database
- Implement rotation with overlap periods
- Track usage per key for analytics
- Support immediate revocation
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
a5c-ai/babysitter
gsd-tools
Central utility skill for GSD operations. Provides config parsing, slug generation, timestamps, path operations, and orchestrates calls to other specialized skills. Acts as the unified entry point that the original gsd-tools.cjs provided via its lib/ modules (commands, config, core, init).
a5c-ai/babysitter
model-profile-resolution
Resolve model profile (quality/balanced/budget) at orchestration start and map agents to specific models. Enables cost/quality tradeoffs by selecting appropriate AI models for each agent role.
a5c-ai/babysitter
verification-suite
Plan structure validation, phase completeness checks, reference integrity verification, and artifact existence confirmation. Provides the structured verification layer ensuring GSD artifacts are well-formed and complete.
a5c-ai/babysitter
state-management
STATE.md reading, writing, and field-level updates. Provides cross-session state persistence via .planning/STATE.md with structured fields for current task, completed phases, blockers, decisions, and quick tasks.
a5c-ai/babysitter
git-integration
Git commit patterns, formats, and conventions for GSD methodology. Provides atomic commits per task, structured commit messages, planning file commits, branch management, and milestone tag operations.
a5c-ai/babysitter
frontmatter-parsing
YAML frontmatter parsing and manipulation for .planning/ documents. Provides read, write, update, query, and validation operations on frontmatter blocks in GSD markdown artifacts.
Didn't find tool you were looking for?