secrets-tools

What problem does it solve?

This Skill addresses the critical security risk of accidental exposure of sensitive information (API keys, private keys) in code or artifacts. It automates the detection and redaction of secrets, preventing costly data leaks and ensuring compliance.

Core Features & Use Cases

• Secure Scanning: Scans files for common secret patterns (GitHub tokens, AWS keys, private keys, JWTs) and reports locations only, strictly never exposing the secret content itself.
• In-Place Redaction: Safely replaces identified secret types with [REDACTED:type] placeholders directly within files.
• Publish Gate Integration: Designed to determine safe_to_publish status, acting as a critical safeguard against accidental secret exposure before deployment or publication.
• Use Case: Before publishing any artifacts or code, use this skill to scan the relevant files for secrets. If any are found, automatically redact them in-place and report the findings to a JSON file, ensuring no sensitive data leaves the secure environment.

Quick Start

Use the secrets-tools skill to scan the '.runs/my-feature/deploy' directory for secrets and output findings to 'secrets_scan.json'.