secret-scan

Detect hardcoded secrets in source code repositories before committing.

746|130|Updated Jun 30, 2026

Search Tags:#pre-commit hooks #secret detection #API key #token security #data leak prevention

Ready to run

npx skills add https://github.com/Archive228/loopkit --skill secret-scan-archive228

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: secret-scan
Source: https://github.com/Archive228/loopkit/tree/main/skills/secret-scan
Command: npx skills add https://github.com/Archive228/loopkit --skill secret-scan-archive228

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill scans files for hardcoded secrets such as API keys and tokens, ensuring that sensitive information isn't inadvertently committed to your codebase.

Core Features & Use Cases

Detect Hardcoded Secrets: Automatically search for common secret patterns in files before committing.
Before Commit: Run as a pre-commit hook to prevent sensitive information from being checked in.
File-Specific: Scan any file containing credentials to protect against accidental disclosure.
Quick Rotation Guide: Provide a step-by-step guide to rotate detected secrets if necessary.

Quick Start

Use 'secret-scan' to scan all code files for secrets before committing changes to the repository.

Frequently Asked Questions about secret-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I detect hardcoded secrets and API keys before committing code?▼

To detect hardcoded secrets before committing, you can run a secret scan as a pre-commit hook to automatically search files for known API key patterns and prevent sensitive information from being checked in.

What is secret detection in source code repositories?▼

Secret detection in source code repositories is the process of monitoring file content for hardcoded credentials like API keys and tokens to prevent sensitive information from being inadvertently committed to your codebase.

How do I scan specific files for hardcoded tokens and credentials?▼

You can scan any specific file for hardcoded tokens by running a file-specific secret detection process that checks the file content against known secret patterns to protect against accidental disclosure.

What should I do if a secret scan finds exposed API keys in my code?▼

If a secret scan finds exposed API keys in your code, you should follow a quick rotation guide to step through the process of rotating the detected secrets to secure your application.

Does secret scanning work as a pre-commit hook for data leak prevention?▼

Yes, secret scanning works as a pre-commit hook for data leak prevention by automatically running before commit to block sensitive information like API keys from being checked into the repository.

Can I use this secret detection method for security compliance workflows?▼

Yes, you can use this secret detection method for security compliance workflows as it scans source code repositories for hardcoded credentials and provides rotation guidance to maintain compliance.