Secret Detection & Remediation

This skill transforms Claude into a security-focused engineer capable of systematically scanning source code for high-confidence secret patterns like API keys, connection strings, and private keys. It intelligently distinguishes between real threats and false positives—such as test fixtures or placeholders—and integrates directly with GitHub Secret Scanning alerts. Beyond detection, the skill provides a comprehensive workflow for rotating compromised credentials, removing them from Git history, and implementing secure alternatives like Azure Key Vault or environment variables.

主要功能

使用场景