Scans codebases for hardcoded API keys, credentials, and sensitive data patterns to prevent security breaches.
The Secrets Scanner skill for Claude Code provides an automated security layer by identifying exposed credentials within your project. It leverages specialized agents to detect patterns matching API tokens, passwords, and private keys, categorizing findings by severity and confidence levels. Whether you are auditing a legacy repository or performing a pre-commit check on staged changes, this skill ensures sensitive information is identified and remediated before it can be compromised or leaked to public version control.
Key Features
01Severity-based reporting with actionable remediation steps
02Pre-commit scanning via git staged-changes analysis
03Repository-wide auditing with intelligent folder exclusion
04Detection of API keys, tokens, and hardcoded credentials
0538 GitHub stars
06False positive validation to ensure high-quality security reports
Use Cases
01Verifying staged changes for sensitive data before pushing to remote branches
02Performing a security audit on a new or inherited codebase
03Ensuring compliance with internal security policies regarding credential management
