Secrets Detection Rules Expert

Generate and optimize secrets detection rules for credentials and API keys.

Updated Dec 3, 2025
One-click install
npx skills add https://github.com/Razmik-Kutinava/test.admin_logistic_v8 --skill secrets-detection-rules-expert
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: Secrets Detection Rules Expert
Source: https://github.com/Razmik-Kutinava/test.admin_logistic_v8/tree/main/.claude/skills/secrets-detection-rules
Command: npx skills add https://github.com/Razmik-Kutinava/test.admin_logistic_v8 --skill secrets-detection-rules-expert

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps you create, optimize, and manage robust rules for detecting sensitive secrets like API keys and credentials within your codebase, preventing security breaches.

Core Features & Use Cases

  • Rule Creation & Optimization: Develop precise regex patterns and leverage entropy analysis for high-confidence secret detection.
  • False Positive Reduction: Implement whitelisting and path exclusions to minimize noise and focus on real threats.
  • Use Case: You need to ensure no hardcoded API keys are present in your new microservice before deployment. This Skill can generate a comprehensive set of rules to scan your repository and flag any potential secrets.

Quick Start

Generate a set of rules to detect AWS access keys and bearer tokens.

Frequently Asked Questions about Secrets Detection Rules Expert

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I write regex patterns for detecting API keys in source code?

To reduce false positives in secrets detection, you can implement whitelisting and path exclusions alongside your regex rules. This approach minimizes noise by filtering out known safe paths, allowing you to focus only on real threats like hardcoded credentials.

What is the best way to scan a microservice for hardcoded AWS access keys before deployment?

The best way to scan for hardcoded AWS access keys before deployment is to generate a comprehensive set of secrets detection rules. This Skill creates targeted patterns to identify sensitive cloud provider credentials and authentication methods across your repository.

How does entropy analysis work for finding sensitive credentials?

Yes, you can optimize existing secrets detection rules by refining regex patterns and applying whitelisting. This Skill manages and optimizes your current rules to improve accuracy across various secret types, formats, and authentication methods.

Do I need to define path exclusions for secrets detection in specific directories?

Yes, you should define path exclusions for secrets detection in specific directories to prevent false positives. This Skill allows you to implement path exclusions and whitelisting to minimize noise and ensure comprehensive coverage for real threats.