ftm-git

What problem does it solve?

Secrets leakage via Git happens when API keys, tokens, or credentials are accidentally committed. This Skill enforces a hard safety gate that scans staged files, working tree, and git history to detect hardcoded secrets and blocks commit or push operations until remediation is completed, reducing blast radius and credential rotation needs.

Core Features & Use Cases

• Secret scanning and blocking for staged/committed content to prevent secrets from entering git history
• Automatic remediation by extracting secrets to a gitignored .env file and refactoring source files to read from environment variables
• Pre-commit hook installation that provides a safety net beyond Claude’s active intervention
• Blackboard/experience logging to capture remediation outcomes and inform future actions
• Integration with ftm-executor and ftm-mind to gate commit/push workflows and ensure safe deployments

Quick Start

Enable the ftm-git gate in your repository and let it automatically scan for secrets, block unsafe commits, and perform remediation.