Detect leaked credentials and secret-like content in git changes.
npx skills add https://github.com/jabb4/dotfiles --skill secrets-jabb4
Please help me install this Agent Skill. Skill: secrets Source: https://github.com/jabb4/dotfiles/tree/main/.claude/skills/secrets Command: npx skills add https://github.com/jabb4/dotfiles --skill secrets-jabb4
Secrets scanners prevent accidental leakage of sensitive credentials into git by identifying risky filenames and secret-like content before changes land in your repository history.
Run the secrets skill on your pending changes by invoking /commit so it scans staged content and asks what to do about each potential secret before anything is committed.
High-intent search queries and answers about installing and using this skill.
Scan staged changes for leaked credentials by running a pre-commit check that enumerates candidate files, flags risky filenames, and searches content for well-known secret formats like AWS keys and JWTs.
A git working tree scanner detects sensitive filenames like .env variants, credential patterns such as AWS keys, GitHub tokens, Stripe keys, JWTs, private key blocks, and suspicious variable assignments like password or api_key.
Yes, you can update .gitignore when a secret is found by using an interactive workflow that prompts per finding, allowing you to add targeted entries to .gitignore and untrack already tracked files.
Perform a standalone repository audit for leaked secrets by scanning the git working tree, which enumerates candidate files via git status and ls-files, then reviews filenames, content patterns, and suspicious assignments.
False positives during suspicious variable assignment detection are reduced using heuristics that filter out obvious placeholders, prompting per finding with options to ignore, abort, or update .gitignore for safe handling.
OpenAuthorityReport staged, unstaged, and untracked files from git status --porcelain.
pwv-vcRemove tracked Git files with status checks and safety prompts.
nsheapsAnalyze git changes and create atomic, convention-compliant commit messages.
cwinvestmentsScan source code and git history for hardcoded secrets and leaked API keys.
