detect-hardcoded-secrets

Detect hardcoded secrets by running a pattern-based scan across your source code. This Skill applies a phased detection pipeline—pattern searches, assignment verification, cloud-provider key checks, and result validation—to surface exposed credentials, API keys, passwords, and connection strings across multiple languages in a structured format.

Yes, this Skill is designed for security audits and code reviews. It detects hardcoded secrets, API keys, and credentials to prevent credential leakage. Run it as part of your review workflow to surface potential exposures before code reaches production.

The detector identifies API keys, passwords, credentials, cloud-provider keys, assignment patterns, and connection strings. It uses pattern-based detection and verification with symbol references to confirm findings across all major programming languages.

Automated secret detection applies consistent pattern matching and multi-stage verification across your entire codebase at once. This is faster and more comprehensive than manual reviews, catches variations in secret formats, and reduces human error in credential leakage investigations.

After detection, rotate compromised credentials immediately, remove hardcoded secrets from source history, move credentials to environment variables or secret management systems, and implement pre-commit hooks to prevent future exposures.