Detect exposed secrets and rotate credentials into secret managers.
npx skills add https://github.com/arbazkhan971/godmode --skill secrets-arbazkhan971
Please help me install this Agent Skill. Skill: secrets Source: https://github.com/arbazkhan971/godmode/tree/main/skills/secrets Command: npx skills add https://github.com/arbazkhan971/godmode --skill secrets-arbazkhan971
This Skill helps teams discover, remediate, and harden exposed secrets across codebases, git history, CI/CD pipelines, and deployment environments to prevent credential compromise and unauthorized access.
Scan the repository and git history for exposed credentials, revoke and rotate any verified leaks into a secret manager, install a gitleaks pre-commit hook if missing, and produce a secrets audit report.
High-intent search queries and answers about installing and using this skill.
Scanning git history for leaked secrets involves checking the working tree and full commit history for hardcoded credentials and sensitive environment files. This detects exposed API keys and sensitive data to prevent unauthorized access.
The best way to rotate compromised credentials is to revoke them, generate new secrets, and migrate them into a secrets manager or Vault. This verifies rollovers and minimizes service disruption during remediation.
Installing a gitleaks pre-commit hook prevents secret leaks by enforcing .env handling best practices and blocking hardcoded credentials before they enter the repository. This hardens prevention and automates auditing.
Yes, scrubbing git history for exposed environment files is supported to remediate leaked secrets. This process removes sensitive data from past commits while generating access and exposure audit reports for compliance.
You can automate access auditing and onboarding for cloud or on-prem secret stores. This applies to CI/CD pipelines and deployment environments, performing rotation and recording incidents in a secrets audit log.
To generate a secrets audit report after remediating exposed credentials, record the incident and access logs during the revocation and rotation process. This verifies the remediation steps and documents exposure for compliance.
Sir-chawakornDetect hardcoded credentials and generate remediation plans for secure vault migration.
kissrosecicd-hubScan Git diffs for exposed credentials using entropy analysis and regex patterns.
elasticdotventuresAutomate loading of per-project environment variables via direnv and dotenv with Rust validation.
marquesfelipDetect exposed credentials and secrets across codebases, logs, and environments.
