review-leaks

Detect secrets, credentials, PII, and sensitive data leaks in code.

6|2|Updated Jan 26, 2026
One-click install
npx skills add https://github.com/freepik-company/knowledge-agent --skill review-leaks
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: review-leaks
Source: https://github.com/freepik-company/knowledge-agent/tree/main/.claude/skills/review-leaks
Command: npx skills add https://github.com/freepik-company/knowledge-agent --skill review-leaks

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill acts as a vigilant security engineer, meticulously scanning code to identify and prevent the accidental leakage of sensitive information before it's pushed to public repositories.

Core Features & Use Cases

  • Secret Detection: Identifies hardcoded API keys, credentials, and tokens.
  • Configuration Review: Flags sensitive data in configuration files and deployment manifests.
  • PII Identification: Detects personally identifiable information that should not be exposed.
  • Use Case: Before merging a new feature branch into your main repository, use this Skill to ensure no accidental API keys or user data have been committed, safeguarding your project from potential breaches.

Quick Start

Act as a Security Engineer and review the provided code for any potential secrets or sensitive data leaks.

Frequently Asked Questions about review-leaks

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my code for hardcoded secrets before pushing to a public repository?

Scanning code for hardcoded secrets involves evaluating credentials, configuration files, and infrastructure exposure. This process identifies API keys, tokens, and sensitive data leaks, recommending remediation to ensure your code is safe for public release.

What types of sensitive data and credentials should I check for before a public release?

Before a public release, check for hardcoded API keys, configuration file secrets, PII, debug artifacts, certificates, and cloud service credentials. Detecting these sensitive data types prevents accidental exposure of internal infrastructure and user information.

How does PII detection work during a code review for public repositories?

PII detection during code review identifies personally identifiable information committed into source code or configuration files. It flags sensitive user data that should not be exposed, ensuring you remove accidental leaks before merging into public repositories.

Can I use automated secret detection to check Git hygiene and cloud service credentials?

Yes, automated secret detection can evaluate Git hygiene and cloud service credentials. It reviews deployment manifests and configuration files to find exposed internal infrastructure details, ensuring committed code is sanitized before reaching a public repository.

What is the best way to prevent accidental API keys and user data exposure in code?

The best way to prevent accidental API keys and user data exposure is acting as a security engineer to scan code meticulously. This identifies secrets, PII, and configuration vulnerabilities, recommending remediation before merging new feature branches into main repositories.