objc-secrets-detection-audit

Audit Objective-C source files for hardcoded secrets using ripgrep.

Updated Jul 26, 2026
One-click install
npx skills add https://github.com/jvalinsky/garazyk --skill objc-secrets-detection-audit
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: objc-secrets-detection-audit
Source: https://github.com/jvalinsky/garazyk/tree/main/.opencode/skills/objc-secrets-detection-audit
Command: npx skills add https://github.com/jvalinsky/garazyk --skill objc-secrets-detection-audit

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires rg, and includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill helps identify and prevent the accidental exposure of sensitive information like API keys, passwords, and private keys within Objective-C codebases.

Core Features & Use Cases

  • Automated Scanning: Scans Objective-C source files (.m, .mm, .h) for common patterns of hardcoded secrets.
  • Categorized Findings: Differentiates between passwords, API keys, tokens, private keys, and connection strings.
  • Use Case: Before committing code, run this audit to ensure no production credentials have been inadvertently included, preventing potential security breaches.

Quick Start

Run the secrets detection script on the current directory, outputting results to /tmp/objc-secrets-detection-audit.

Frequently Asked Questions about objc-secrets-detection-audit

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan Objective-C code for hardcoded API keys and passwords?

To scan Objective-C code for hardcoded API keys and passwords, run an automated secrets detection audit on your source files. The audit categorizes findings like tokens and private keys into a summary report for review.

What is the best way to prevent accidental credential exposure in Objective-C files?

Preventing accidental credential exposure in Objective-C files involves scanning source code for sensitive data patterns before committing. This process identifies hardcoded secrets, connection strings, and private keys to avert potential security breaches.

Does this secrets detection audit support Objective-C header and implementation files?

Yes, this secrets detection audit supports Objective-C header and implementation files. It scans `.m`, `.mm`, and `.h` file extensions to find hardcoded secrets and categorizes the sensitive data exposure patterns it finds.

How do ripgrep and automated scanning identify private keys in Objective-C source code?

Ripgrep identifies private keys in Objective-C source code through efficient pattern matching. The automated scanning utilizes ripgrep to search for sensitive data exposure patterns and generates a report categorizing the discovered credentials.

Can I differentiate between API keys and passwords when auditing Objective-C codebases?

Yes, you can differentiate between API keys and passwords when auditing Objective-C codebases. The audit categorizes findings into distinct groups including passwords, API keys, tokens, private keys, and connection strings.

Why should I run a secrets detection audit before committing Objective-C code?

You should run a secrets detection audit before committing Objective-C code to ensure no production credentials have been inadvertently included. This prevents potential security breaches by verifying no sensitive information is exposed.