memstack-security-secrets-scanner

Scan source code and git history for hardcoded secrets and leaked API keys.

412|45|Updated Feb 19, 2026
One-click install
npx skills add https://github.com/cwinvestments/memstack --skill memstack-security-secrets-scanner
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: memstack-security-secrets-scanner
Source: https://github.com/cwinvestments/memstack/tree/main/skills/security/secrets-scanner
Command: npx skills add https://github.com/cwinvestments/memstack --skill memstack-security-secrets-scanner

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill helps identify and prevent the accidental exposure of sensitive information like API keys and credentials within your codebase.

Core Features & Use Cases

  • Secret Detection: Scans files and git history for hardcoded secrets.
  • Credential Exposure Prevention: Acts as a safeguard against leaked API keys.
  • Use Case: Before committing code, run this skill to ensure no sensitive API keys are accidentally included, preventing potential security breaches.

Quick Start

Scan the current project for any hardcoded secrets or leaked credentials.

Frequently Asked Questions about memstack-security-secrets-scanner

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan source code for leaked API keys and hardcoded secrets?

To scan source code for leaked API keys, this skill examines your project files and git history to detect exposed credentials. It identifies hardcoded secrets to prevent accidental security breaches before code commits.

Does this secrets scanner check git history for exposed credentials?

Yes, this secrets scanner checks git history for exposed credentials alongside scanning current source files. It performs comprehensive detection across your entire repository history to find leaked API keys.

Can I use this to run pre-commit checks for credential exposure prevention?

Yes, you can use this skill for pre-commit checks to prevent credential exposure. Running it before committing code ensures no sensitive API keys or hardcoded secrets are accidentally included in your changes.

What is the best way to detect hardcoded secrets during a security audit?

The best way to detect hardcoded secrets during a security audit is scanning across both current files and git history. This comprehensive approach ensures all exposed credentials and leaked API keys are identified.

What types of sensitive information does this code scanning detect?

This code scanning detects hardcoded secrets, exposed credentials, and leaked API keys within your codebase. It identifies sensitive information to safeguard against accidental credential exposure and potential security breaches.