security-secrets-scan
CommunityFind leaked secrets and prevent recurrence.
System Documentation
What problem does it solve?
Scans repository history and build artifacts for leaked secrets (keys, tokens, certs) and proposes a prevention policy — pre-commit hooks, CI check, rotation plan. Output: findings report, remediation steps (rotate / revoke / invalidate), and hook/CI proposals. Pulled by the security specialist. TRIGGER: "scan the repo for leaked secrets", "check for exposed API keys in X", "secret-scan the X artifact", "audit git history for credentials", "find leaked tokens in X", "set up leak-prevention hooks for X".
Core Features & Use Cases
- Scan history and build artifacts for leaked credentials, tokens, and certificates.
- Verify findings, rotate secrets to stop live use, and land prevention (pre-commit hooks + CI checks).
- Triage false positives with an allowlist and establish escalation for confirmed live secrets.
Quick Start
Run the security-secrets-scan on your repository to generate a findings report and remediation plan.
Dependency Matrix
Required Modules
None requiredComponents
Standard package💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: security-secrets-scan Download link: https://github.com/lookatitude/guild/archive/main.zip#security-secrets-scan Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 471,000+ vetted skills library on demand.