skills.rest
zangxin75
zangxin75COMMUNITY
Explore all skills by this author →
GitHub

security-sentinel

Scan workspaces for exposed secrets and misconfigurations using regular expressions.

Updated Mar 1, 2026
Search Tags:#security#vulnerability#audit#secrets#misconfiguration#scan
One-click install
npx skills add https://github.com/zangxin75/openclaw-skills --skill security-sentinel-zangxin75
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-sentinel
Source: https://github.com/zangxin75/openclaw-skills/tree/main/security-sentinel
Command: npx skills add https://github.com/zangxin75/openclaw-skills --skill security-sentinel-zangxin75

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill proactively scans your workspace for security vulnerabilities, exposed secrets, and common misconfigurations, helping to prevent data breaches and unauthorized access.

Core Features & Use Cases

  • Secret Detection: Identifies common patterns for exposed API keys, private keys, and tokens in various file types.
  • Integrity Checks: Verifies the presence of critical security files like SECURITY.md and AGENTS.md.
  • Forbidden Path Detection: Flags potentially risky or hidden directories.
  • Use Case: Before committing code or sharing your workspace, run this scan to ensure no sensitive credentials are accidentally exposed, maintaining a secure development environment.

Quick Start

Run the security sentinel scan to check for vulnerabilities in the current directory.

Frequently Asked Questions about security-sentinel

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan my code repository for exposed secrets and API keys?▼

To scan for exposed secrets, run a script using predefined regular expressions to detect API keys, private keys, and tokens across your workspace files. This prevents accidental credential exposure in code repositories before committing your project.

What is the best way to detect security misconfigurations in my project files?▼

Detecting security misconfigurations involves running a workspace scan that verifies the presence of critical security files like SECURITY.md and AGENTS.md, while also flagging potentially risky or hidden directories for review before sharing your code.

Do I need Node.js to run a workspace vulnerability audit?▼

Yes, you need Node.js to execute the vulnerability audit scan scripts. The scanner requires Node.js to run predefined regular expressions and utilizes fs and path modules to perform file system operations and file integrity checks.

Can I check for missing security files like SECURITY.md in my workspace?▼

Yes, you can check for missing security files. The scan performs integrity checks that verify the presence of critical security files like SECURITY.md and AGENTS.md in your project directory to maintain a secure development environment.

What types of hidden directories are flagged during a workspace security scan?▼

The security scan flags potentially risky or hidden directories through forbidden path detection. This mechanism identifies risky directories in your workspace to prevent accidental exposure of sensitive project files and configurations.

Related Skills

Explore More Software Engineering Skills→
EverClawEverClaw

code-formatter

Format and lint JavaScript, Python, and shell scripts.

Official
Basic
itallstartedwithaideaitallstartedwithaidea
31

secret-protection

Scan .env files, code, and diffs for exposed secrets and redact runtime outputs.

Community
Advanced
patricio0312revpatricio0312rev
5

secrets-scanner

Detect leaked credentials in codebases across pre-commit hooks and CI pipelines.

Community
Advanced
martinholovskymartinholovsky
45

CI/CD Pipeline Security Expert

Automate CI/CD pipeline security hardening with GitHub Actions.

Community
Advanced