Detect hardcoded secrets, API keys, and credentials in source code.
npx skills add https://github.com/fatihkan/badi --skill sc-secrets-fatihkan
Please help me install this Agent Skill. Skill: sc-secrets Source: https://github.com/fatihkan/badi/tree/main/.claude/skills/security-check/sc-secrets Command: npx skills add https://github.com/fatihkan/badi --skill sc-secrets-fatihkan
Hardcoded secrets in source code pose serious security risks. This skill detects API keys, credentials, and private keys embedded in repositories to prevent leakage and misuse.
Run the secret scanner on your repository to identify exposed keys.
High-intent search queries and answers about installing and using this skill.
Detect hardcoded secrets by applying regex pattern matching, entropy-based heuristics, and context-aware checks across multiple languages and config files to identify exposed API keys, tokens, and credentials.
Scan for exposed credentials during code reviews by running the secret scanner across your repository to surface embedded private keys and tokens before they are merged into the main branch.
Entropy analysis reduces false positives in secret detection by measuring randomness in strings and applying context-aware checks to distinguish actual API keys from test values or environment reads.
You can integrate secret detection into CI/CD pipelines to perform automated code scanning, catching hardcoded credentials and preventing leaks before deployment.
Static analysis can find hardcoded credentials like API keys, tokens, and private keys embedded in various file types and source code languages.
nickromneyConfigure security scanning for codebases and CI/CD pipelines.
cwinvestmentsScan source code and git history for hardcoded secrets and leaked API keys.
lemigAudit infrastructure for secrets, supply chain, CI/CD, and AI security gaps.
Camilo8902Detect leaked credentials in code repositories with Gitleaks, detect-secrets, and TruffleHog.
