What problem does it solve? Hardcoded credentials, committed .env files, and stale secrets are among the most common causes of security incidents. This Skill audits repositories for likely secret leaks, classifies findings by severity, and provides concrete guidance for rotation, prevention, and CI/CD secret handling. ## Core Features & Use Cases - Secret Leak Detection: Run the bundled Python auditor to scan env files and source code for patterns like AWS keys, GitHub tokens, Slack tokens, private key blocks, and JWTs, with severity-ranked findings and JSON output for CI pipelines. - Rotation & Incident Response: Follow step-by-step playbooks for emergency credential rotation, git history scanning, and secret removal using tools like git filter-repo, gitleaks, and truffleHog. - Prevention & Hardening: Set up pre-commit hooks with gitleaks or detect-secrets, validate required environment variables at startup, and choose the right cloud secret store (Vault, AWS Secrets Manager, Azure Key Vault, GCP Secret Manager). - Use Case: Before pushing a commit that touched config files, run the auditor on your repo, review critical findings, rotate any real credentials, and add a pre-commit hook so leaks are blocked before they reach version control. ## Quick Start Scan my repository for leaked secrets and show me the critical findings with recommended rotation steps.
