Scans source code and Git history to identify and mitigate hardcoded secrets, API keys, and credentials.
The Secrets Detector skill empowers Claude to perform comprehensive security audits by scanning repositories for leaked credentials and sensitive data. It leverages industry-standard tools like Gitleaks and detect-secrets to identify AWS keys, GitHub tokens, and private keys within both current files and historical Git commits. By providing categorized risk reports and remediation guidance, this skill helps developers prevent credential exposure before deployment and establishes secure coding practices through pre-commit hooks and environment variable management.
主な機能
01Support for custom regex patterns and multiple detection tools like Gitleaks and detect-secrets.
02Automated scanning for API keys, passwords, and private keys using specialized tools.
0319 GitHub stars
04Prevention workflows including pre-commit hook setup and .gitignore optimization.
05Deep Git history audits to find and remove secrets from previous commits.
06Risk-based findings categorization (Critical, High, Medium) for prioritized remediation.
ユースケース
01Performing a security audit before pushing local code to a public repository.
02Scrubbing sensitive credentials that were accidentally committed to the Git history.
03Implementing automated secret detection workflows in local development environments.
