source-leak

Detect exposed source code and credentials via targeted repository searches.

54|5|Updated May 9, 2026
One-click install
npx skills add https://github.com/jinyimeng01/mastermind-bug-bounty --skill source-leak
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: source-leak
Source: https://github.com/jinyimeng01/mastermind-bug-bounty/tree/main/skills/source_leak
Command: npx skills add https://github.com/jinyimeng01/mastermind-bug-bounty --skill source-leak

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill helps security researchers identify accidentally exposed source code, configuration files, and credentials by turning technology fingerprints into targeted leak searches.

Core Features & Use Cases

  • Leak Discovery Queries: Builds focused GitHub, Gitee, and search engine dorks from unique code snippets, framework markers, and application fingerprints.
  • Sensitive Asset Identification: Guides searches for exposed configs, API keys, database settings, CI/CD files, and internal documentation.
  • Use Case: Use this Skill during authorized security assessments to investigate whether a target application's unique identifiers appear in public repositories or indexed content.

Quick Start

Use the source-leak skill to create targeted search queries for finding publicly exposed configuration files related to this authorized application.

Frequently Asked Questions about source-leak

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find exposed source code and credentials on GitHub?

To find exposed source code and credentials on GitHub, this Skill constructs targeted search dorks from unique application fingerprints and configuration patterns to locate accidentally leaked assets in public repositories.

What are source leak dorks and how do they work for security assessments?

Source leak dorks are specialized search queries built from technology fingerprints and unique code snippets. They work by targeting public repositories and search engines to discover exposed configuration files and credentials during authorized security assessments.

Can I search for exposed configuration files and API keys on Gitee?

Yes, you can search for exposed configuration files and API keys on Gitee. The Skill builds focused discovery queries for public repositories to identify sensitive assets like database settings, CI/CD files, and internal documentation.

How do I turn technology fingerprints into search queries for leaked secrets?

You can turn technology fingerprints into search queries for leaked secrets by extracting unique code snippets and framework markers, then applying query construction methods to find matching exposed source code across public repositories.

Is this source leak discovery method authorized for investigating application exposure?

Yes, this source leak discovery method is designed for authorized security assessments. It applies to investigating whether a target application's unique identifiers appear in public repositories or indexed content for exposure analysis.

What types of sensitive assets can I discover using source leak dorking?

Using source leak dorking, you can discover sensitive assets including exposed configuration files, API keys, database settings, CI/CD files, and internal documentation indexed in public repositories or search engines.