Automate GitLeaks secret detection in Husky pre-commit workflows.
npx skills add https://github.com/ruchernchong/claude-kit --skill security-ruchernchong
Please help me install this Agent Skill. Skill: security Source: https://github.com/ruchernchong/claude-kit/tree/main/skills/security Command: npx skills add https://github.com/ruchernchong/claude-kit --skill security-ruchernchong
This Skill automates the setup of GitLeaks in a project's pre-commit workflow and coordinates targeted security audits of codebases.
Set up GitLeaks in Husky, then run a security audit using the security-auditor agent. Optionally perform a history scan if needed.
High-intent search queries and answers about installing and using this skill.
Automating secret detection with GitLeaks involves integrating it into Husky pre-commit hooks to scan staged changes. This prevents secrets from being committed by running targeted scans automatically before code is saved to the repository.
Scanning Git history for leaked secrets requires running a gitleaks detect history scan across the repository. This optional scan surfaces previously exposed credentials so you can remediate and rotate compromised secrets.
Yes, Husky must be installed to enforce GitLeaks scanning at commit time. The setup requires Husky and lint-staged to automatically execute secret detection on staged changes during the pre-commit workflow.
Securing a repository after GitLeaks finds exposed secrets requires guided remediation to rotate compromised credentials. The security-auditor agent provides actionable steps to analyze code for vulnerabilities and secure sensitive data.
Yes, you can detect OWASP-related issues alongside secrets using a security-auditor agent. The agent analyzes the codebase to identify both leaked credentials and broader security vulnerabilities during the audit process.
Using lint-staged with Husky for pre-commit secret scanning restricts GitLeaks execution to staged files only. This approach optimizes performance by ensuring the security audit runs solely on changes ready for commit.
edfentonAutomate local Git hook installation and enforcement for pre-commit checks.
manastalukdarScan codebases and Git history for exposed secrets using Gitleaks and TruffleHog.
walid-mosConfigure Husky pre-commit hooks with lint-staged and Prettier for JavaScript/TypeScript projects.
kollaboraiIdentify security vulnerabilities in Python codebases without modifying source files.
