public-repo-safety

Scan repositories for secrets, personal data, and local paths before public releases.

Updated Mar 15, 2026
One-click install
npx skills add https://github.com/tubtrb/autoreport --skill public-repo-safety
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: public-repo-safety
Source: https://github.com/tubtrb/autoreport/tree/main/codex/skills/public-repo-safety
Command: npx skills add https://github.com/tubtrb/autoreport --skill public-repo-safety

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

Check the autoreport repository for public-release safety issues such as secrets, personal identifiers, local absolute paths, unsafe screenshots, and accidental artifact promotion. Use when Codex is preparing a public commit, push, release, PR, publish-ready doc set, or any other output that could leave the local machine or become visible outside the private workspace.

Core Features & Use Cases

  • Scan tracked files for secrets, credentials, personal data, and local absolute paths that could leak in public artifacts.
  • Validate that no unsafe screenshots or internal prompts are promoted into public docs or releases.
  • Provide a clear pass/fail report with exact blocker locations to stop public release until issues are resolved.

Quick Start

Review the repository for public-release safety by running a preflight pass on the current workspace and report any blockers before a release.

Frequently Asked Questions about public-repo-safety

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my repository for secrets and PII before a public release?

To scan for secrets and PII before a public release, run a preflight pass on your workspace to identify tracked files containing credentials, personal identifiers, and local absolute paths. This produces a file-scoped blocker report detailing exact locations for remediation.

What is public repo safety scanning and when do I need it?

Public repo safety scanning identifies public-release risks like secrets, personal data, and unsafe artifacts in your codebase. You need it before pushes, releases, PRs, or publish-ready docs to prevent accidental exposure of sensitive information outside the private workspace.

Does preflight repo scanning check untracked files for public exposure risks?

Yes, preflight repo scanning evaluates both tracked files and qualified untracked artifacts that could become public. This ensures unsafe screenshots, internal prompts, and local paths are caught even if they have not yet been committed to version control.

How do I stop accidental artifact promotion in my public commits?

Stop accidental artifact promotion by enforcing blocker categories for unsafe screenshots and internal prompts during your preflight scan. The scan produces a pass/fail report with exact blocker locations to halt public release until issues are resolved.

What's the best way to identify local absolute paths in my codebase before pushing?

The best way to identify local absolute paths is executing a preflight workspace scan targeting public-release safety. This flags local paths alongside secrets and personal data, providing a concise blocker report suitable for remediation decisions before any push.

Why does my preflight scan fail before a public release?

Your preflight scan fails because it detected blocker categories like secrets, personal data, local paths, or unsafe screenshots. The scan enforces a strict pass/fail check, generating a file-scoped report of exact locations that must be remediated before release.