secrets-rotate git:20260911.3a0a7c8A

Immutable. This exact content is served forever at /api/v1/blob/a79e691be6fc6a43.

---
name: "secrets-rotate"
description: "Rotate a Secret - Update an existing secret with a new value. Logs the rotation action to the audit log (never the value)."
---
<!-- GENERATED by claude-power-pack - scripts/codex-skill-sync.py; edit .claude/commands/secrets/rotate.md instead -->

# Rotate a Secret

Update an existing secret with a new value. Logs the rotation action
to the audit log (never the value).

## Arguments

- `KEY` (required): Secret key to rotate
- `VALUE` (optional): New value (prompts interactively if not provided)

## Instructions

When the user invokes `/secrets-rotate KEY [VALUE]`, run:

```bash
PYTHONPATH="${HOME}/Projects/claude-power-pack:${PYTHONPATH}" uv run --project "${HOME}/Projects/claude-power-pack" python -m lib.creds rotate "$KEY" "$VALUE"
```

Without value (interactive prompt):
```bash
PYTHONPATH="${HOME}/Projects/claude-power-pack:${PYTHONPATH}" uv run --project "${HOME}/Projects/claude-power-pack" python -m lib.creds rotate "$KEY"
```

**IMPORTANT:** Never echo or display the secret value in output.

Report the rotation result to the user.