testing-for-sensitive-data-exposure

Detect sensitive data exposure across web applications, APIs, and browser storage.

2|Updated Apr 14, 2026
One-click install
npx skills add https://github.com/Acczdy/MoZiSec --skill testing-for-sensitive-data-exposure
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: testing-for-sensitive-data-exposure
Source: https://github.com/Acczdy/MoZiSec/tree/main/web-security/.claude/skills/testing-for-sensitive-data-exposure
Command: npx skills add https://github.com/Acczdy/MoZiSec --skill testing-for-sensitive-data-exposure

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires requests, urllib3, and includes scripts (resource) and references (resource) components.

What problem does it solve?

Detect and identify sensitive data exposure in web applications, APIs, and browser/storage contexts, to prevent data leaks.

Core Features & Use Cases

  • JavaScript secret detection in client bundles
  • Exposed configuration and TLS/security checks
  • API data exposure analysis and reporting
  • Comprehensive security posture assessment across transport, storage, and version control

Quick Start

Run the agent against a target application to scan for sensitive data exposure and generate a findings report.

Frequently Asked Questions about testing-for-sensitive-data-exposure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect sensitive data exposure in web applications and APIs?

You can detect sensitive data exposure by scanning API endpoints, browser storage, and TLS configurations using an automated agent. This process identifies leaked secrets in JavaScript bundles and exposed configuration files to prevent data leakage.

How does JavaScript secret scanning work for client bundles?

JavaScript secret scanning analyzes client-side bundles to identify hardcoded credentials and sensitive data exposure. The agent inspects exposed configuration checks and API data exposure to prevent leaks during authorized security assessments.

Can I use token authentication and configurable endpoints for API security assessments?

Yes, you can configure endpoints and use token authentication when running the Python-based agent for API security assessments. This allows targeted scanning of API data exposure and TLS validation across specified web applications.

What's the best way to check TLS configurations and exposed configuration files?

The best way to check TLS configurations is through automated TLS validation and exposed configuration checks during a security posture assessment. This identifies sensitive data exposure across transport, storage, and version control contexts.

Does this sensitive data exposure scanner require Python dependencies to run?

Yes, the sensitive data exposure scanner requires the Python dependencies requests and urllib3 to run. These libraries enable the automated agent to perform API data exposure analysis and JavaScript secret detection.

Why should I use an automated agent for sensitive data exposure instead of manual checks?

An automated agent provides a comprehensive security posture assessment across transport, storage, and version control that manual checks easily miss. It systematically generates findings reports for sensitive data exposure across APIs and browser storage.