secret-guard

Detect and block secrets in staged Git diffs before commits.

31|4|Updated Apr 6, 2026

Search Tags:#git #security #credentials #pre-commit #secret-scanning

Ready to run

npx skills add https://github.com/kissrosecicd-hub/agents-evolution --skill secret-guard-kissrosecicd-hub

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: secret-guard
Source: https://github.com/kissrosecicd-hub/agents-evolution/tree/main/.agents/skills/pr-prep-secret-guard
Command: npx skills add https://github.com/kissrosecicd-hub/agents-evolution --skill secret-guard-kissrosecicd-hub

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

Mandatory secret scanning before any git operation to prevent accidental exposure of API keys, tokens, and credentials in version control.

Core Features & Use Cases

Automatic detection of secrets in staged changes across common file types.
Blocking of git operations (commit, push, PR) when secrets are detected, with remediation guidance.
Safe handling with configurable patterns and minimal false positives for efficient workflow.

Quick Start

Enable automatic secret scanning on staged changes and ensure it runs before any commit.

Frequently Asked Questions about secret-guard

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan staged Git changes for secrets before committing?▼

To scan staged Git changes for secrets, this Skill automatically inspects staged diffs before any commit, identifying sensitive credentials and blocking the operation with remediation guidance.

What is pre-commit secret scanning and how does it prevent credential leaks?▼

Pre-commit secret scanning is a mandatory check that inspects staged changes to detect API keys, tokens, and credentials, blocking git operations to prevent accidental exposure in version control.

Can I configure custom patterns for secret detection to reduce false positives?▼

Yes, you can configure custom patterns for secret detection. The Skill supports safe handling with configurable patterns to ensure minimal false positives for an efficient workflow.

Does this pre-commit hook block git push and pull requests or just local commits?▼

This pre-commit hook blocks all sensitive git operations. It applies to workflows involving commits, pushes, and pull requests, blocking any operation when secrets are detected in staged changes.

What happens when sensitive credentials are found in my staged files?▼

When sensitive credentials are found in staged files, the Skill blocks the git operation immediately and provides specific remediation steps to help you safely remove or secure the exposed secrets.