secret-scanner

What problem does it solve?

This Skill automatically detects and prevents accidental exposure of sensitive information like API keys, database credentials, and private tokens in your codebase. It provides real-time alerts and can even block commits, safeguarding your project from critical security breaches.

Core Features & Use Cases

• Real-time Detection: Scans for a wide range of secrets (AWS keys, Stripe keys, passwords, JWTs) as you code or before commits.
• Pre-Commit Protection: Integrates with Git to block commits that contain exposed secrets, ensuring they never reach your repository.
• Use Case: You accidentally hardcode const stripeKey = 'sk_live_1234567890abcdef';. The skill immediately alerts you to the critical exposure, suggesting you move it to an environment variable and add .env to .gitignore.

Quick Start

The skill activates automatically on file saves or before commits.

Write some code that might contain a secret:

const myApiKey = 'your_hardcoded_api_key_here';

The skill will instantly alert you if a secret pattern is detected.