Detect AI API key leakage patterns in code repositories and build artifacts.
npx skills add https://github.com/xeon826/dotfiles --skill security-ai-keys-xeon826
Please help me install this Agent Skill. Skill: security-ai-keys Source: https://github.com/xeon826/dotfiles/tree/main/opencode/skill/security-ai-keys Command: npx skills add https://github.com/xeon826/dotfiles --skill security-ai-keys-xeon826
This Skill helps identify and prevent the accidental exposure of sensitive AI API keys within your codebase and deployment artifacts, safeguarding against unauthorized access and potential misuse.
Run the security-ai-keys skill to scan the current directory for exposed AI API keys.
High-intent search queries and answers about installing and using this skill.
Use security-ai-keys to detect AI API key leakage by scanning code, environment files, and build artifacts for exposed patterns from providers like OpenAI, Anthropic, and Gemini.
Code scanning identifies AI API key exposure risks including client-side exposure, embedded secrets in build outputs, and insecure logging practices across code repositories and deployment artifacts.
Yes, you need ripgrep installed to scan for exposed API keys, as it provides the efficient pattern matching required to detect sensitive AI API key leakage across code repositories and build outputs.
Yes, you can audit your project for OpenAI and Anthropic API keys before deploying by running a scan to check for inadvertently exposed secrets in configuration files, environment files, and client-side code.
The best way to prevent accidental AI API key exposure in deployment artifacts is to run an audit scan that detects embedded secrets in build outputs and insecure logging practices before application deployment.
IgorWarzochaAudit codebases for exposed AI API keys and recommend redaction strategies.
galfrevnManage API keys and secrets securely through API commands.
weirdgmeAutomate security integration across CI/CD pipelines with policy-as-code enforcement.
matteocervelliScan codebases for secrets, vulnerable dependencies, and insecure patterns.
