repomix-safe-mixer

Hardcoded credentials leak when packaging code without scanning first. This Skill scans directories for API keys, tokens, and database secrets before running repomix, blocks packaging if secrets are found, and reports exact file and line locations so you can remove them safely.

Yes. This Skill automatically scans for common credential patterns in your codebase, produces a detailed report with file and line numbers, and prevents repomix packaging until all secrets are remediated, enforcing a clean-pack workflow.

The Skill identifies common hardcoded credentials including API keys, authentication tokens, database connection strings, and other sensitive secrets that could expose your infrastructure or third-party integrations if packaged.

Yes. The Skill integrates with repomix by scanning before packaging. It uses Python to scan for secret patterns, blocks repomix if threats are detected, and lets packaging proceed only when the scan is clean.

The Skill stops the repomix packaging process, generates a report showing the file path and line number of each detected secret, and prompts you to remove the credentials before retrying the package operation.

Yes. Beyond packaging workflows, the Skill scans any directory for hardcoded credentials and produces detailed findings with locations, making it useful for security-focused audits and credential remediation before code sharing or distribution.