Does this scan my entire Git history?

The pre-commit hook primarily scans the files you are currently trying to commit. For a full history scan, you would run Gitleaks or TruffleHog manually against the entire repository.

Which tools are required for the Secure Repo skill?

This skill requires Gitleaks and TruffleHog installed on your system. It provides scripts to help you install these tools on both macOS and Linux.

Can I use this on existing repositories?

Absolutely. You can run the secure-repo skill on any existing Git repository to install the necessary hooks and ensure future commits are protected.

Will this skill block my Git commits?

Yes, if a potential secret is detected during the pre-commit stage, the hook will block the commit and alert you to the finding so you can remove the sensitive data.

How do I handle false positives identified by the scanner?

If a detection is a confirmed false positive, you can either add the pattern to a .gitleaksignore file or bypass the hook using the 'git commit --no-verify' command.

Secure Repository - Secret Scanning

Name: Secure Repository - Secret Scanning
Author: alliance-genome

byalliance-genome

•

Security & Testing

Protects Git repositories from accidental exposure of API keys, passwords, and tokens by installing automated secret scanning hooks.

The Secure Repo skill enhances repository security by integrating Gitleaks and TruffleHog directly into your local Git workflow. It automates the setup of pre-commit hooks that scan staged changes for sensitive information like AWS keys, Slack webhooks, and private tokens, effectively preventing credentials from ever reaching your codebase. This skill is essential for developers and security teams who need to maintain strict compliance and prevent the high-risk consequences of accidental secret leakage in both private and open-source projects.

Key Features

01Installs automated Git pre-commit hooks for real-time protection

02Supports automated tool installation for macOS and Linux environments

03Blocks commits containing API keys, private tokens, and credentials

04Includes built-in testing commands to verify hook functionality

05Integrates industry-standard security tools Gitleaks and TruffleHog

061 GitHub stars

Use Cases

01Securing a newly cloned repository before beginning development

02Implementing standardized security guardrails for local development teams

03Preventing cloud credential leaks in infrastructure-as-code projects

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add alliance-genome/agr_claude_code secure-repo

For use in Claude.ai and ChatGPT

Download Skill