Secret & Credential Scanner

About

The Secret & Credential Scanner skill empowers Claude to proactively secure your development environment by scanning for hardcoded secrets such as AWS keys, database passwords, and private SSH keys. By utilizing both regex-based pattern matching and entropy analysis, it detects potential security vulnerabilities before they are committed to version control. This skill provides detailed reports with specific file locations and actionable remediation steps, ensuring that sensitive information is properly managed through environment variables or secure vaults instead of plaintext files.

Key Features

• Entropy analysis to identify non-standard passwords and secrets
• Comprehensive vulnerability reporting with exact file locations
• 0 GitHub stars
• Pattern-based detection for common API keys (AWS, Google, Azure)
• Actionable remediation guidance for revoking and securing keys
• Proactive scanning to prevent accidental credential leakage

Use Cases

• Auditing a repository for accidentally committed cloud provider credentials
• Identifying exposed private SSH or PGP keys before deploying to production
• Checking configuration files for hardcoded database passwords during a migration