Audits codebases for sensitive data, secrets, and credentials before making repositories public.
The Open Source Security Checker skill transforms Claude into a security specialist focused on protecting your private information during the transition to open source. It provides comprehensive guidance for identifying hardcoded API keys, database credentials, and private certificates across your entire codebase and Git history. By implementing industry-standard workflows with tools like Gitleaks and TruffleHog, this skill ensures that sensitive data is not only removed from current files but also purged from historical commits, preventing costly security breaches before they happen.
主な機能
01Detects API keys, database credentials, and private .pem certificates
02Assists in setting up pre-commit hooks to prevent future credential leaks
0310 GitHub stars
04Audits Git history across all branches and tags for historical secrets
05Provides instructions for permanent data purging using git-filter-repo
06Identifies PII including emails and phone numbers within code and comments
ユースケース
01Preparing a private enterprise repository for a public open-source release
02Performing a security audit on a codebase to identify exposed cloud provider keys
03Sanitizing sensitive data from a project's history before pushing to GitHub
