security-ai-keys

Community

Detect AI key leaks and enforce secret hygiene.

Authorjustinlevinedotme
Version1.0.0
Installs0

System Documentation

What problem does it solve?

This Skill helps identify and mitigate AI API key leakage and insecure secret handling in applications and codebases, reducing risk from exposed credentials.

Core Features & Use Cases

  • Secret detection: scans for common leakage paths (client-side env vars, build artifacts, logs) and flags risky configurations.
  • Redaction guidance: provides actionable steps to redact keys in logs, outputs, and telemetry.
  • Audit-ready: generates a checklist aligned with devsecops practices to rotate keys and enforce server-side usage.
  • Use Case: Imagine a web app that accidentally ships a NEXT_PUBLIC_AI_KEY in the browser; this skill guides you to relocate keys to server-side storage and rotate them.

Quick Start

Run the AI key leakage scan against your codebase to locate exposed keys and verify redaction practices.

Dependency Matrix

Required Modules

rg

Components

scripts

💻 Claude Code Installation

Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.

Please help me install this Skill:
Name: security-ai-keys
Download link: https://github.com/justinlevinedotme/jalco-opencode/archive/main.zip#security-ai-keys

Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
View Source Repository

Agent Skills Search Helper

Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.