Enforces defense-in-depth security for AI-assisted development pipelines.
npx skills add https://github.com/tody-agent/codymaster --skill cm-secret-shield
Please help me install this Agent Skill. Skill: cm-secret-shield Source: https://github.com/tody-agent/codymaster/tree/main/skills/cm-secret-shield Command: npx skills add https://github.com/tody-agent/codymaster --skill cm-secret-shield
Defense-in-depth security to prevent secrets leakage across the full AI-assisted development lifecycle, from writing code to deployment and runtime.
Install and enable the pre-commit guards to automatically scan for secrets before every commit.
High-intent search queries and answers about installing and using this skill.
Preventing secrets from leaking in AI-assisted code requires defense-in-depth security across the development lifecycle. Automated guardrails block leaks by enforcing checks during code writing, pre-commit hooks, repository scans, and pre-deploy audits.
Setting up pre-commit hooks for secret scanning involves installing and enabling the Pre-Commit Guard. This automatically scans staged files to block secrets before every commit, stopping leaks at the source.
Defense-in-depth security for secret management is a layered protection strategy covering five defense layers: Write Guard, Pre-Commit Guard, Repo Scan, Deploy Gate, and Runtime Guard. These layers stop secrets at the source across ongoing development.
This secret scanning approach works with existing deployment workflows through a Deploy Gate. It integrates with cm-project-bootstrap and cm-safe-deploy workflows to perform deploy-time audits and prevent leaked secrets from reaching production.
You can track secret rotation and lifecycle governance automatically using the Runtime Guard. It ensures timely key rotation and traceability across new projects and ongoing development, satisfying layered safety guardrail requirements.
The best way to scan an entire git repository for secrets is using the Repo Scan defense layer. It performs repository-wide audits to detect hidden secrets, complementing pre-commit hooks and deploy-time checks for full lifecycle coverage.
tnezInitialize the .docent directory structure and configuration for new projects.
app-vitalsConfigure branch protection, required checks, secrets, and deploy hooks for merge gates.
cloudvoyantCreate conventional Git commits with pre-commit hooks and CI monitoring.
brucebanner010198-commitsProvision vault references for project credentials with expiry and rotation governance.
