api-credentials-hygiene

Audit git history for exposed API keys and verify file permissions.

Updated Aug 23, 2026
One-click install
npx skills add https://github.com/Niraven/pokee-deep-research-skill --skill api-credentials-hygiene
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: api-credentials-hygiene
Source: https://github.com/Niraven/pokee-deep-research-skill/tree/main/skills/api-credentials-hygiene
Command: npx skills add https://github.com/Niraven/pokee-deep-research-skill --skill api-credentials-hygiene

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps prevent security breaches by auditing and enforcing best practices for API credential management, ensuring secrets are not exposed and are regularly rotated.

Core Features & Use Cases

  • Credential Exposure Detection: Scans for accidentally committed API keys or sensitive information in code repositories.
  • Permission Auditing: Verifies that sensitive files have restrictive file permissions (e.g., 600).
  • Rotation Schedule Management: Tracks and reminds users about upcoming API credential rotation deadlines.
  • Use Case: A development team can use this skill to automatically check all new code commits for exposed API keys before they are merged, preventing costly data leaks.

Quick Start

Run the api-credentials-hygiene skill to audit your project's API key security.

Frequently Asked Questions about api-credentials-hygiene

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan git history for exposed API keys and secrets?▼

To scan git history for exposed API keys, you can audit your repository to detect accidentally committed sensitive information and plaintext environment files. This process prevents security breaches by identifying leaked credentials before they are exploited.

What is API credential rotation schedule management?▼

API credential rotation schedule management is the process of tracking and enforcing expiration dates for API keys. It ensures compliance with secure credential management policies by regularly reminding users to rotate unmanaged secrets.

How do I audit file permissions for sensitive environment files?▼

To audit file permissions for sensitive environment files, you verify that configuration files have restrictive permissions such as 600. This permission auditing ensures plaintext environment files remain inaccessible to unauthorized users.

Can I automatically check code commits for exposed API keys before merging?▼

Yes, you can automatically check new code commits for exposed API keys before they are merged. This automated auditing prevents costly data leaks by enforcing best practices for credential management during development.

Why do I need credential management policies for plaintext environment files?▼

You need credential management policies for plaintext environment files to address security risks associated with unmanaged expiration dates and accidental exposure. Enforcing these policies prevents security breaches caused by leaked secrets.