Secret Scanner

About

The Secret Scanner skill empowers Claude to proactively identify security vulnerabilities by scanning your codebase for hardcoded credentials, such as AWS keys, database passwords, and SSH private keys. Utilizing a combination of regex pattern matching and entropy analysis, it provides detailed reports on the exact location of exposed secrets and offers actionable remediation steps, ensuring sensitive information is removed or secured before being committed or deployed.

Key Features

• Actionable remediation guidance for revoking and rotating keys
• Configuration file auditing for .env, YAML, and JSON files
• Entropy analysis to identify non-patterned sensitive strings
• Automated detection of cloud provider API keys (AWS, Azure, GCP)
• Detailed vulnerability reporting with specific file locations
• 0 GitHub stars

Use Cases

• Auditing legacy repositories for accidentally committed credentials
• Pre-deployment security checks to prevent secret leaks in production
• Scanning environment configurations for hardcoded database passwords