Detect hard-coded secrets in code repositories and generate remediation guidance.
npx skills add https://github.com/Q16G/aster --skill secret-detection-q16g
Please help me install this Agent Skill. Skill: secret-detection Source: https://github.com/Q16G/aster/tree/main/skills/code-audit/secret-detection Command: npx skills add https://github.com/Q16G/aster --skill secret-detection-q16g
Detects hard-coded secrets in codebases to prevent credential leakage and reduce security risk.
Scan a target repository to identify hard-coded secrets and generate a remediation plan.
High-intent search queries and answers about installing and using this skill.
To detect hard-coded secrets in a codebase, you can scan your source files to identify embedded API keys, tokens, and credentials. The process applies static analysis rules to prevent credential leakage and generates actionable remediation guidance.
Yes, you can integrate secret detection into CI/CD pipelines to fail builds when hard-coded secrets are discovered. This alerts developers during code reviews and prevents credentials from reaching production repositories.
Static analysis for code security scans repositories to detect hard-coded credentials without executing the code. It logs findings locally, provides risk scoring for the discovered secrets, and offers remediation guidance without exfiltrating your data.
No, secret scanning does not exfiltrate your source code or found credentials. The detection process satisfies rules locally, logs findings on your machine, and provides remediation guidance without sending your data externally.
The best way to generate remediation guidance for leaked tokens is to run a repository scan that identifies the credentials and automatically produces actionable risk scoring and remediation steps tailored to the found secrets.
berkcangumusisikScan codebases to detect committed secrets, tokens, and credentials.
lookatitudeScan git history and build artifacts for leaked credentials and tokens.
oioio-spaceScan staged Git diffs for credentials, PII, and sensitive data.
statick88Automate security scanning for JavaScript and Python projects.
