Scan Git repositories and GitHub organizations for exposed API keys and credentials.
npx skills add https://github.com/zebbern/termstack --skill github-recon
Please help me install this Agent Skill. Skill: github-recon Source: https://github.com/zebbern/termstack/tree/main/.github/skills/github-recon Command: npx skills add https://github.com/zebbern/termstack --skill github-recon
The skill provides a security-focused workflow to scan Git repositories, GitHub organizations, and source code for leaked secrets, API keys, and credentials, enabling rapid detection and remediation.
Run a targeted secret scan on a GitHub repository or local directory to identify exposed credentials.
High-intent search queries and answers about installing and using this skill.
To scan a Git repository for exposed API keys and credentials, you can run a targeted secret scan using tools like TruffleHog, Gitleaks, or git-secrets to detect leaked secrets across commit histories. This workflow automates discovery and provides remediation guidance.
Finding leaked secrets in a GitHub organization requires scanning source code and commit histories across multiple repositories. This skill automates secret discovery by applying structured workflows using industry-standard tools to identify exposed keys for security reviews.
Yes, you can detect credentials in private repository histories. The scanning workflow applies targeted credential investigations across both public and private Git repositories, enabling rapid identification of exposed secrets in past commits.
Both TruffleHog and Gitleaks are supported for code audits and security reviews. This skill integrates these industry-standard tools into structured workflows, allowing you to choose the appropriate scanner based on your specific secret detection requirements.
You should run a secret scan during security reviews, code audits, and as pre-commit checks to identify exposed keys before deployment. This prevents credential exposure by catching leaked secrets early in the development workflow.
enderphan94Analyze GitHub commit histories and diffs to detect unpatched security gaps.
Greenmamba29Scan environment files and codebases for exposed secrets and generate a remediation report.
statick88Automate vulnerability detection across code, dependencies, containers, and infrastructure.
4lermanAudit repositories for sensitive data and manage environment variables securely.
