Infisical/ai-skills

infisical-access-control

Infisical access control and governance — roles and custom permissions, granular secret actions, ABAC, temporary access, approval workflows, and audit log streaming.

infisical-agent

Guide for configuring the Infisical Agent — a client daemon that manages auth token lifecycle and renders secrets to files via Go templates.

infisical-api

Guide for the Infisical REST API — authentication, secrets CRUD (v4), projects, identities, pagination, and rate limits.

infisical-app-connections

Create and manage Infisical App Connections — the reusable authenticated links to 83 third-party services that Secret Syncs, Secret Rotations, PKI, and Secret Scanning all depend on.

infisical-dynamic-secrets

Guide for configuring Infisical Dynamic Secrets — on-demand, short-lived credentials for databases, cloud IAM, SSH, and Kubernetes across all 30 providers.

infisical-gateway

The Infisical Gateway and Relay — reaching private network resources with outbound-only SSH reverse tunnels, gateway pools for HA, and no inbound firewall rules.

infisical-kms

Infisical KMS — managed cryptographic keys for encrypt/decrypt, sign/verify, and HMAC, plus external KMS backing, KMIP, and Sigstore cosign.

infisical-kubernetes-operator

The Infisical Kubernetes Operator — syncing secrets into Kubernetes Secrets and ConfigMaps via v1beta1 and legacy v1alpha1 CRDs, with auto-reload and push-secret support.

infisical-pam

Infisical Privileged Access Manager — brokered access to databases and servers for humans and AI agents, with session recording, approvals, and no credential exposure.

infisical-pki

Infisical Certificate Management — certificate authorities, certificate profiles and applications, ACME/EST/SCEP/API enrollment, PKI syncs, code signing, and post-quantum algorithms.

infisical-secret-rotation

Configure Infisical Secret Rotation — automatically rotating existing third-party credentials on a schedule across 28 providers, with dual-phase zero-downtime rotation.

infisical-secret-scanning

Infisical Secret Scanning — detecting leaked credentials in GitHub/GitLab/Bitbucket repositories and locally with the `infisical scan` CLI, plus AWS honey tokens.

infisical-secret-syncs

Guide for configuring Infisical Secret Syncs to push secrets to all 48 supported destinations including AWS Secrets Manager, GCP Secret Manager, Azure Key Vault, GitHub, Vercel, HashiCorp Vault, Snowflake, and Databricks.

infisical-self-host

Guide for self-hosting Infisical — Docker, Kubernetes Helm, environment variables, ENCRYPTION_KEY setup, FIPS compliance, scaling, and production hardening.

infisical-setup

Interactive setup guide for integrating Infisical into your projects — CLI, Docker, Kubernetes, CI/CD, SDKs, and machine identity auth.

infisical-sso

Connect Infisical to an identity provider — SAML, OIDC, LDAP and free Google/GitHub SSO, SCIM user and group provisioning, group-to-role mapping, and SSO enforcement with break-glass access.

infisical-terraform

Guide for using the Infisical Terraform Provider — HCL resources, ephemeral secrets, data sources, project roles, and Terraform Cloud OIDC integration.

More from this repository7

infisical-user-setup-guide🎯Skill

Provides AI coding agents with a setup guide for Infisical, the open-source secret management platform, available as installable skills or via a docs MCP server for always-up-to-date documentation access.

infisical-secret-syncs🎯Skill

Provides AI coding agents with accurate knowledge about Infisical's secret synchronization features, available as installable agent skills or via a docs MCP server for real-time documentation access.

infisical-api🎯Skill

Provides guidance for working with the Infisical REST API to manage secrets, projects, environments, and machine identities. Covers Universal Auth authentication, CRUD operations on secrets via the v4 API, pagination, rate limiting, and region selection for both cloud and self-hosted deployments.

infisical-agent🎯Skill

Guides configuration of the Infisical Agent, a client daemon that manages token lifecycle and renders secrets to files via Go templates. Covers all 6 auth methods (Universal Auth, Kubernetes, AWS IAM, Azure, GCP), template functions, polling, caching, and deployment patterns.

infisical-dynamic-secrets🎯Skill

A setup guide for configuring Infisical Dynamic Secrets, which generate on-demand, short-lived credentials for 27 providers including PostgreSQL, MySQL, Redis, MongoDB, AWS IAM, GCP IAM, SSH certificates, and Kubernetes service accounts. Covers prerequisites, provider selection, TTL management, and gateway setup for private networks.

infisical-self-host🎯Skill

Guides deployment and operation of self-hosted Infisical instances with Docker, Docker Compose, and Kubernetes, covering ENCRYPTION_KEY management, PostgreSQL/Redis setup, production hardening, FIPS compliance, horizontal scaling, and high availability patterns.