Detect secrets and credentials in source code and configuration files.
npx skills add https://github.com/JcgGOs/fulong --skill security-scan-jcggos
Please help me install this Agent Skill. Skill: security-scan Source: https://github.com/JcgGOs/fulong/tree/main/skills/security-scan Command: npx skills add https://github.com/JcgGOs/fulong --skill security-scan-jcggos
Detects secrets and sensitive credentials in source code and configuration.
Run a pre-commit style scan to detect tokens, API keys, and passwords in your repository and surface them for remediation.
High-intent search queries and answers about installing and using this skill.
Detecting secrets in source code involves scanning files for sensitive credentials like API keys and tokens. This Skill performs pre-commit checks and repository audits to identify exposed secrets and provide remediation guidance before they are committed.
Yes, scanning git history for leaked credentials investigates past commits to find embedded passwords and tokens. This Skill performs git history investigations to catch secrets that may have been committed previously, surfacing them for remediation.
A pre-commit check for credential leaks scans staged source code and configuration files to block sensitive tokens from entering the repository. It applies pattern scans to identify API keys, passwords, and other secrets before they are committed.
Auditing configuration files for sensitive credentials involves scanning them for hardcoded tokens and passwords. This Skill performs configuration file audits to identify secrets, guarding against accidental credential leaks in your repository.
After finding exposed API keys during a code review, you should follow remediation guidance to rotate and ignore the secrets. This Skill identifies tokens and provides best practices to remediate detected credential leaks.
xlelibertyAudit local repositories for hardcoded credentials using regex pattern matching.
Greenmamba29Scan environment files and codebases for exposed secrets and generate a remediation report.
bailynloveAutomate pre-commit code verification with static security scanning and quality gates.
stephanjConducts security audits and vulnerability assessments on codebases and infrastructure.
