Scan local file systems for hardcoded credentials and sensitive configuration files.
npx skills add https://github.com/alangeb/tau --skill security-audit-alangeb
Please help me install this Agent Skill. Skill: security-audit Source: https://github.com/alangeb/tau/tree/main/src/skills/security-audit Command: npx skills add https://github.com/alangeb/tau --skill security-audit-alangeb
This Skill mitigates the risk of accidental credential exposure and security misconfigurations by automating the discovery of sensitive data and insecure file permissions within a project directory.
Run the security audit on the current directory to identify potential secrets and sensitive files.
High-intent search queries and answers about installing and using this skill.
To scan for hardcoded credentials, execute this audit on your project directory to detect exposed secrets and sensitive configuration files using pattern matching. It identifies AWS keys, GitHub tokens, and environment variables to prevent accidental data leaks before deployment.
The best way to find sensitive files is running a local security audit that uses file discovery to locate exposed private keys, environment files, and configuration artifacts within your codebase. This prevents accidental credential exposure when pushing to public repositories.
You do not need special dependencies to run this security audit. It requires only standard Unix utilities like grep and find to execute comprehensive scans of local project directories for potential secrets and sensitive files.
Pattern matching detects security vulnerabilities by scanning local file systems for specific text patterns associated with hardcoded API keys, passwords, and tokens. This identifies potential data leaks and insecure configuration artifacts within project directories.
Yes, you can use this security scan to check for insecure file permissions. The audit automates the discovery of sensitive data and misconfigurations within a project directory to mitigate the risk of accidental credential exposure before deployment.
danwanValidate technology stack components in a project directory using shell-based detection signatures.
endorlabsScan codebases for exposed secrets and API keys via MCP.
zangxin75Stage, commit, and push local workspace changes to a GitHub repository.
JosiahSiegelIntegrate Microsoft Defender for DevOps into Azure Pipelines for automated security scanning.
