dlp-scanner

Scan Claude Code workspaces for credentials, private keys, and personal data.

1|Updated Feb 3, 2026
One-click install
npx skills add https://github.com/run6270/skill --skill dlp-scanner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: dlp-scanner
Source: https://github.com/run6270/skill/tree/main/dlp-scanner
Command: npx skills add https://github.com/run6270/skill --skill dlp-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill automatically scans your Claude Code workspace for sensitive data like private keys, API keys, and passwords, preventing accidental data leaks.

Core Features & Use Cases

  • Sensitive Data Detection: Identifies various types of credentials and secrets using regular expressions.
  • Configurable Scan Locations: Allows scanning of high-priority areas like memory and workspace, with options for medium and low-priority locations.
  • Alert Levels: Categorizes findings into CRITICAL, HIGH, MEDIUM, and LOW with corresponding recommended actions.
  • Use Case: Automatically run this scanner nightly to ensure no API keys or private keys are accidentally committed or stored in conversation memory.

Quick Start

Run a full DLP scan of your Claude Code workspace.

Frequently Asked Questions about dlp-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my workspace for plaintext API keys and private keys?

To scan for sensitive data leaks, you can run a full DLP scan across your workspace to detect plaintext credentials, private keys, and API keys using regular expression patterns.

What types of sensitive data and secrets can a DLP scanner detect?

A data loss prevention scanner detects cryptocurrency keys, mnemonic phrases, API keys, SSH keys, generic secrets, and personally identifiable information across specified directories.

How do I set up nightly secrets scanning to prevent accidental data leaks?

You can configure the DLP scanner to run nightly automatically, ensuring that no API keys or private keys are accidentally committed to repositories or stored in conversation memory.

Can I configure which directories are scanned for sensitive data exposure?

Yes, you can scan configurable locations categorized by priority, including high-priority areas like memory and workspace, along with options for medium and low-priority directories.

How does the scanner classify and alert on detected credentials and PII?

The scanner categorizes findings into CRITICAL, HIGH, MEDIUM, and LOW alert levels, providing tiered alerts and actionable remediation steps for each identified risk.

What are the limitations of regex-based secrets scanning for data loss prevention?

Regex-based secrets scanning detects known patterns for credentials and keys but may miss context-aware leaks or non-standard formats, requiring manual review for comprehensive data loss prevention coverage.