openclaw-secret-scanning-maintainer

Triage and redact GitHub Secret Scanning alerts across issues, PRs, and comments.

2|Updated Mar 15, 2026
One-click install
npx skills add https://github.com/AG064/argentum --skill openclaw-secret-scanning-maintainer-ag064
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: openclaw-secret-scanning-maintainer
Source: https://github.com/AG064/argentum/tree/main/.agents/skills/argentum-secret-scanning-maintainer
Command: npx skills add https://github.com/AG064/argentum --skill openclaw-secret-scanning-maintainer-ag064

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Maintainer-only workflow for handling GitHub Secret Scanning alerts on Argentum. Use when Codex needs to triage, redact, clean up, and resolve secret leakage found in issue comments, issue bodies, PR comments, or other GitHub content.

Core Features & Use Cases

  • Triage and manage Secret Scanning alerts across issues, PRs, and comments.
  • Redact sensitive content and replace or remove leaks while preserving context for auditability.
  • Purge, recreate, or redact content history with safety checks; notify affected users with templates.
  • Provide structured workflows for maintainers including validation, consent, and escalation notes.

Quick Start

Execute the secret-scanning.mjs script located at .agents/skills/openclaw-secret-scanning-maintainer/scripts/secret-scanning.mjs to manage secret-scanning alerts.

Frequently Asked Questions about openclaw-secret-scanning-maintainer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I redact leaked secrets found in GitHub issue comments and PRs?

To redact leaked secrets in GitHub issue comments and PRs, you can run a script-driven workflow that uses GitHub REST and GraphQL APIs to hide sensitive content, safely patch or delete leak history, and notify stakeholders while preserving audit trails.

What is the best way to triage GitHub secret scanning alerts as a maintainer?

Triage GitHub secret scanning alerts using a deterministic, maintainer-only workflow that validates and resolves leaked secrets across issues, PRs, and comments, enforcing safe redaction operations and logging actions for auditability.

Can I purge the content history of a leaked secret in a GitHub issue body?

Yes, you can purge content history of leaked secrets in GitHub issue bodies by executing script-driven operations that safely patch or delete exposed content, replacing leaks with redacted text while maintaining structured audit logs.

Does GitHub secret scanning redaction require consent or validation before resolving alerts?

GitHub secret scanning redaction workflows enforce validation and consent checks before resolving alerts, providing structured escalation notes and notifying affected users with templates to ensure safe patch and delete operations.

How do I audit secret redaction actions taken across GitHub issues and pull requests?

You audit secret redaction actions by executing a script-driven workflow that logs all triage, redaction, and resolution operations performed on GitHub issues and pull requests, ensuring complete auditability and stakeholder notification.