security-auditor

Secret detection scans your repository's tracked files and commit history for exposed API keys, credentials, and sensitive patterns. This Skill audits current code and Git history to identify leakage points, then provides structured findings with remediation steps.

Yes. Gitignore validation verifies whether sensitive files have correct ignore rules in place. The Skill analyzes your ignore configuration to ensure credentials and private data won't be tracked in future commits.

Git history analysis searches past commits for exposed secrets that may have been committed before ignore rules were added. The Skill identifies leakage across your full commit history and recommends removal strategies.

A full repository audit checks tracked files, historical commits, and ignore configurations in a single pass. Run an explicit security audit to generate a comprehensive report with issues and remediation guidance before release.

Yes. The Skill integrates with bfg and git-filter-repo as dependencies for advanced secret removal workflows. These tools help clean secrets from history after detection and audit.

The Skill detects common secret patterns including API keys, passwords, and credentials through configurable detection rules. It flags tracked files containing sensitive information and validates that ignore rules protect them.