When should I use the Secret Scanner skill?

Use it whenever you are reviewing code for security, setting up new integrations, or conducting a repository audit to ensure no sensitive data is exposed.

Does it follow industry security standards?

Yes, the Secret Scanner aligns with the Security Fundamentals category and follows best practices defined by standards such as OWASP and common secure coding frameworks.

Can this skill help me fix security vulnerabilities?

Yes, it provides production-ready code examples and step-by-step guidance on how to move hardcoded secrets into secure environment variables or vault systems.

Does this skill require external tools?

It leverages built-in Claude Code capabilities like Read, Write, and Bash to perform local scans within your development environment.

How does the Secret Scanner identify sensitive data?

The skill uses specialized search patterns and shell commands like Grep to identify strings that match common formats for API keys, private tokens, and authentication credentials.

Secret Scanner

Name: Secret Scanner
Author: jeremylongshore

byjeremylongshore

•

983

•

セキュリティとテスト

Identifies and prevents the accidental exposure of sensitive credentials, API keys, and tokens within your codebase.

The Secret Scanner skill is an automated security utility designed to protect your repository from credential leakage. It scans source code, configuration files, and environment variables for patterns matching authentication tokens, private keys, and API secrets. By following industry best practices and OWASP standards, this skill provides developers with real-time auditing, remediation guidance, and production-ready configurations to ensure sensitive information remains secure and never enters version control.

主な機能

01Production-ready remediation and configuration generation

02Automated detection of hardcoded API keys and tokens

03Integrated support for shell-based scanning tools

04Validation against industry-standard security patterns

05Step-by-step guidance for secure credential management

06983 GitHub stars

ユースケース

01Setting up automated security checks within developer workflows

02Auditing existing repositories for leaked secrets

03Implementing secure coding practices for API integration

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jeremylongshore/claude-code-plugins-plus-skills secret-scanner

For use in Claude.ai and ChatGPT

Download Skill