security-sentinel

Name: security-sentinel
Availability: InStock
Author: zangxin75

Scan workspaces for exposed secrets and misconfigurations using regular expressions.

Updated Mar 1, 2026

Search Tags:#security #vulnerability #audit #secrets #misconfiguration #scan

Ready to run

npx skills add https://github.com/zangxin75/openclaw-skills --skill security-sentinel-zangxin75

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-sentinel
Source: https://github.com/zangxin75/openclaw-skills/tree/main/security-sentinel
Command: npx skills add https://github.com/zangxin75/openclaw-skills --skill security-sentinel-zangxin75

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively scans your workspace for security vulnerabilities, exposed secrets, and common misconfigurations, helping to prevent data breaches and unauthorized access.

Core Features & Use Cases

Secret Detection: Identifies common patterns for exposed API keys, private keys, and tokens in various file types.
Integrity Checks: Verifies the presence of critical security files like SECURITY.md and AGENTS.md.
Forbidden Path Detection: Flags potentially risky or hidden directories.
Use Case: Before committing code or sharing your workspace, run this scan to ensure no sensitive credentials are accidentally exposed, maintaining a secure development environment.

Quick Start

Run the security sentinel scan to check for vulnerabilities in the current directory.

Frequently Asked Questions about security-sentinel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan my code repository for exposed secrets and API keys?▼

To scan for exposed secrets, run a script using predefined regular expressions to detect API keys, private keys, and tokens across your workspace files. This prevents accidental credential exposure in code repositories before committing your project.

What is the best way to detect security misconfigurations in my project files?▼

Detecting security misconfigurations involves running a workspace scan that verifies the presence of critical security files like SECURITY.md and AGENTS.md, while also flagging potentially risky or hidden directories for review before sharing your code.

Do I need Node.js to run a workspace vulnerability audit?▼

Yes, you need Node.js to execute the vulnerability audit scan scripts. The scanner requires Node.js to run predefined regular expressions and utilizes fs and path modules to perform file system operations and file integrity checks.

Can I check for missing security files like SECURITY.md in my workspace?▼

Yes, you can check for missing security files. The scan performs integrity checks that verify the presence of critical security files like SECURITY.md and AGENTS.md in your project directory to maintain a secure development environment.

What types of hidden directories are flagged during a workspace security scan?▼

The security scan flags potentially risky or hidden directories through forbidden path detection. This mechanism identifies risky directories in your workspace to prevent accidental exposure of sensitive project files and configurations.