secret-scanning

What problem does it solve?

This skill helps identify exposed secrets, credentials, and high-entropy values in files, code snippets, and git diffs to reduce the risk of accidental leaks and deployment failures.

Core Features & Use Cases

• Content and File Scanning: Scan pasted text or specific repository files for likely secrets and return locations and confidence levels.
• Git Diff / Staged Changes: Scan staged or recent diffs to catch secrets before commit or push.
• MCP Integration: Uses the GitHub MCP Server's run_secret_scanning tool to perform server-side secret detection and produce structured findings.
• Safety Practices: Includes guidance to avoid scanning large generated directories by default and to request user confirmation before scanning ignored or sensitive local files.

Quick Start

Scan the provided file or staged git changes for exposed secrets and return findings with file locations and remediation suggestions.