What is included in the final investigation report?

The report includes an executive summary, alert provenance (who, when, and where), tool scan results, entropy analysis, risk assessment ratings, and a menu of remediation actions.

Is my secret data sent to third-party services for verification?

Verification only occurs if you explicitly select 'ACTIVE' mode and provide confirmation. Otherwise, the skill performs 'PASSIVE' analysis using local tools and existing git history data.

What tools are required to use the Secret Scanning Investigator?

It primarily requires the GitHub CLI (gh) and git. For deeper analysis, it supports optional open-source tools like TruffleHog, Gitleaks, and ggshield which can be installed via common package managers.

Does this skill automatically close my GitHub security alerts?

No. To ensure safety and prevent accidental data loss, any action that modifies state—such as resolving alerts, adding comments, or cleaning history—requires explicit user confirmation.

Can I analyze multiple alerts at once?

Yes, the skill supports batch processing. You can investigate specific alert IDs, all open alerts in a repo, or even organization-wide critical alerts in a single command.

Secret Scanning Investigator

Name: Secret Scanning Investigator
Author: swannysec

byswannysec

0•

安全与测试

Investigates and analyzes GitHub secret scanning alerts to trace leak provenance, assess security risk, and generate remediation reports.

The Secret Scanning Investigator is a specialized security tool for Claude Code designed to automate the triage and analysis of leaked credentials within GitHub repositories. By leveraging parallel sub-agents and open-source scanners like TruffleHog and Gitleaks, it traces the exact origin of a secret through git history, evaluates its validity, and calculates potential exposure risk. It provides security professionals with a comprehensive, evidence-based report including commit SHAs, timestamps, and actionable remediation steps like history cleanup commands or credential rotation guides, ensuring every finding is backed by technical artifacts rather than assumptions.

主要功能

010 GitHub stars

02Parallel execution architecture for rapid processing of multiple security alerts simultaneously.

03Actionable remediation output including git history cleanup commands and GitHub issue generation.

04Evidence-based risk assessment with standardized ratings from Critical to Low.

05Deep provenance tracing to identify the exact commit, author, and PR that introduced a secret.

06Automated multi-tool scanning using TruffleHog and Gitleaks for high-accuracy detection.

使用场景

01Generating comprehensive compliance reports and remediation tasks for security engineering teams.

02Conducting a forensic investigation into how a specific API key was leaked into public history.

03Triaging a surge of GitHub secret scanning alerts after a major repository migration.

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add swannysec/robot-tools secret-scanning-investigator

For use in Claude.ai and ChatGPT

Download Skill