openclaw-secret-scanning-maintainer

Automate GitHub Secret Scanning alert triage, redaction, and resolution workflows.

Updated Apr 21, 2026
One-click install
npx skills add https://github.com/wuv-dreamguide/openclaw --skill openclaw-secret-scanning-maintainer-wuv-dreamguide
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: openclaw-secret-scanning-maintainer
Source: https://github.com/wuv-dreamguide/openclaw/tree/main/.agents/skills/openclaw-secret-scanning-maintainer
Command: npx skills add https://github.com/wuv-dreamguide/openclaw --skill openclaw-secret-scanning-maintainer-wuv-dreamguide

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

Maintainer-only workflow for handling GitHub Secret Scanning alerts on OpenClaw, enabling safe triage, redaction, cleanup, and resolution of leaked secrets across issues, PRs, and discussions.

Core Features & Use Cases

  • Automated alert fetch: Retrieve alert metadata and all related locations without exposing plaintext secrets.
  • Secret redaction workflow: Identify all secrets in content and replace them with redaction markers.
  • Content purge and recreation: Delete and recreate affected comments/discussion comments to remove leaked content.
  • Notification and resolution: Post standardized maintenance notifications and resolve alerts.

Quick Start

Run the secret-scanning maintainer script to process a single alert by fetching its content, redacting secrets, replacing leaked comments, notifying stakeholders, and closing the alert.

Frequently Asked Questions about openclaw-secret-scanning-maintainer

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automatically redact secrets leaked in GitHub issues and pull requests?

To redact secrets leaked in GitHub issues and pull requests, this Skill identifies secrets in content and replaces them with redaction markers. It then purges and recreates affected comments to completely remove leaked content.

What's the best way to triage GitHub Secret Scanning alerts across discussions?

The best way to triage GitHub Secret Scanning alerts across discussions is by fetching alert metadata and locations without exposing plaintext secrets, applying redaction workflows, and posting standardized maintenance notifications to stakeholders.

How does a maintainer safely resolve secret scanning alerts without exposing plaintext secrets?

A maintainer safely resolves secret scanning alerts by using a dedicated script that enforces safety constraints, avoiding plaintext output of secrets and requiring explicit maintainer controls for destructive operations like purging or replacing content.

Can I purge and recreate leaked comments on GitHub to remove exposed tokens?

Yes, you can purge and recreate leaked comments on GitHub to remove exposed tokens. The Skill deletes and recreates affected comments and discussion comments to eliminate leaked content from the platform's history.

What permissions are required for destructive secret leak cleanup operations on GitHub?

Destructive secret leak cleanup operations on GitHub require explicit maintainer controls. The Skill enforces safety constraints that mandate maintainer authorization before executing content purging, replacing, or alert resolution actions.