secret-handling

Scan repositories for prohibited secret patterns and validate .squad/ directory changes before commits.

Updated May 10, 2026
One-click install
npx skills add https://github.com/AshleyHollis/agentic-identity-lab --skill secret-handling-ashleyhollis
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: secret-handling
Source: https://github.com/AshleyHollis/agentic-identity-lab/tree/main/.copilot/skills/secret-handling
Command: npx skills add https://github.com/AshleyHollis/agentic-identity-lab --skill secret-handling-ashleyhollis

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires scribe, and includes scripts (resource) components.

What problem does it solve?

This Skill helps prevent credential leaks by enforcing strict guidelines on secret handling and ensuring that sensitive information is not committed to the repository.

Core Features & Use Cases

  • Prohibited File Reads: Blocks reading of environment files that contain live credentials.
  • Prohibited Output Patterns: Ensures no secrets are written to .squad/ files.
  • Scribe Pre-Commit Validation: Checks for secrets before committing to the repository.
  • Remediation for Leaks: Provides instructions for handling secrets already committed to git history.
  • Examples: Provides scenarios and best practices for secret management.

Quick Start

Use the secret-handling skill to validate the .squad/ directory before committing changes to prevent secret leaks.

Frequently Asked Questions about secret-handling

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I prevent credential leaks in my git repository before committing?

To prevent credential leaks, you can use pre-commit validation to scan for prohibited patterns and validate directory changes before they are committed to the repository. This ensures sensitive information is detected and blocked early.

What is the best way to scan for exposed secrets in environment files?

Scanning for exposed secrets involves blocking the reading of environment files that contain live credentials and enforcing strict guidelines on secret handling. This prevents sensitive information from being committed to your repository.

Do I need Scribe to validate secrets before a git commit?

Yes, Scribe is required as a pre-commit hook for detection and remediation. It checks for secrets before committing to the repository and provides instructions for handling secrets already committed to git history.

How does pre-commit validation handle secrets already committed to git history?

Pre-commit validation provides specific remediation instructions for handling secrets that have already been committed to git history. This allows developers to securely address historical credential leaks and remove sensitive data.

Can I use secret management practices to validate the .squad/ directory for team collaboration?

Yes, secret management practices apply to secure code development in team collaboration environments. You can validate the .squad/ directory before committing changes to ensure no secrets are written to its files.

Why should I enforce prohibited output patterns for secret management?

Enforcing prohibited output patterns ensures that no secrets are written to .squad/ files. This strict validation step blocks sensitive information from entering the repository and maintains code safety across development environments.