Scan code repositories for committed secrets, API keys, and credentials.
npx skills add https://github.com/SS2608-dev/Resilience --skill secrets-scan
Please help me install this Agent Skill. Skill: secrets-scan Source: https://github.com/SS2608-dev/Resilience/tree/main/.claude/skills/security/secrets-scan Command: npx skills add https://github.com/SS2608-dev/Resilience --skill secrets-scan
This Skill prevents accidental exposure of sensitive information like API keys, passwords, and credentials by scanning your codebase for them before they are committed.
node_modules and .next.Run a secrets scan on the current directory, checking all TypeScript and environment files.
High-intent search queries and answers about installing and using this skill.
To scan your code repository for committed API keys and credentials, this Skill uses pattern matching and known key formats to identify and flag sensitive data leakage across source code, configuration files, and shell scripts.
Yes, secrets scanning excludes common build artifacts and version control directories like node_modules and .next, targeting only relevant source code and configuration files to prevent false positives during the secret detection process.
To check for hardcoded database passwords and tokens before pushing, run a scan on your current directory to identify various secrets using regular expressions, enforcing security best practices by flagging sensitive data leakage.
A code scanner detects various types of secrets including API keys, tokens, passwords, and cloud provider credentials by applying regular expressions and known key formats to your codebase files.
Yes, you can scan specific file types like TypeScript and environment files for sensitive data, running targeted checks on specified extensions while automatically ignoring common directories to streamline the secret detection workflow.
ahravPackage git-tracked source files into a tar.gz archive, excluding binaries and build artifacts.
cwinvestmentsScan source code and git history for hardcoded secrets and leaked API keys.
cmaennerDetect hardcoded credentials and secrets in source code and commit histories.
FlexasaurusrexTrack credential rotation and scan public repositories for exposed secrets.