When is the best time to use this skill?

It is highly recommended to use this skill before committing changes to version control, during periodic security audits, or when refactoring legacy code.

How does the Secret Scanner detect keys?

It uses a combination of regex-based pattern matching for known service keys and entropy analysis to identify high-randomness strings typical of passwords and private keys.

What files does the scanner check?

The scanner analyzes your entire codebase, with a specific focus on configuration files like .env, .yaml, and .json, as well as source code files.

Does it automatically delete the secrets it finds?

No, it flags the location and provides remediation advice so you can safely move secrets to a secure vault or rotate them without breaking your application.

Can this scan for AWS or Google Cloud keys?

Yes, it is designed to recognize common patterns for major cloud providers, including AWS Access Keys, Google Cloud APIs, and Azure credentials.

Security Secret Scanner

Name: Security Secret Scanner
Author: jeremylongshore

byjeremylongshore

•

884

•

Seguridad y Pruebas

Scans your codebase for exposed credentials, API keys, and private keys to prevent security breaches and accidental leaks.

This skill empowers Claude to proactively secure your repository by identifying hardcoded secrets, such as AWS keys, passwords, and SSH keys, using advanced pattern matching and entropy analysis. It streamlines the remediation process by providing detailed location reports and actionable suggestions, making it an essential tool for developers looking to maintain security standards before committing or deploying code to production.

Características Principales

01Comprehensive pattern matching for known API keys like AWS, Google, and Azure.

02884 GitHub stars

03Support for various file formats including configuration files and environment variables.

04Advanced entropy analysis to detect high-randomness strings and hidden credentials.

05Actionable remediation steps to help you secure or rotate exposed data.

06Detailed vulnerability reporting with exact file locations and line numbers.

Casos de Uso

01Finding and replacing plain-text passwords in configuration files with environment variables.

02Verifying pull requests to ensure no sensitive data is accidentally committed to history.

03Auditing a codebase for hardcoded credentials before making a repository public.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills skill-adapter

For use in Claude.ai and ChatGPT

Download Skill