Scan Git repositories, S3 buckets, filesystems, and CI systems for leaked credentials.
npx skills add https://github.com/AeonDave/malskill --skill trufflehog
Please help me install this Agent Skill. Skill: trufflehog Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/cloud/trufflehog Command: npx skills add https://github.com/AeonDave/malskill --skill trufflehog
This Skill helps identify and prevent sensitive information like credentials and API keys from being exposed in code repositories, cloud storage, and CI systems.
Scan the GitHub repository at https://github.com/org/repo for leaked secrets.
High-intent search queries and answers about installing and using this skill.
To scan a Git repository for leaked secrets, you can use this tool to automatically check the commit history for exposed credentials and API keys. It utilizes over 700 detectors to identify sensitive information across your codebase.
Exposed credentials can be checked across S3 buckets and CI systems. The scanner supports broad scanning of cloud storage to find accidentally committed secrets during security audits and cloud reconnaissance.
Yes, executing secret detection on local filesystems requires either a Go binary or a Docker container for execution. This environment setup is necessary to run the entropy analysis and large detector set.
Entropy analysis for finding secrets works by measuring the randomness of strings in code to detect high-entropy text. This mechanism identifies potential credentials that match specific detector patterns or exhibit random characteristics.
The best way to perform a security audit for leaked API keys is using a scanner with over 700 detectors. This approach identifies various types of secrets across all repositories within a GitHub organization.
JuanMS20Configure GitHub authentication for Hermes Agent using git, gh CLI, or SSH credentials.
SandboxServersAudit Azure Key Vault configurations, secret rotation, and leaked credentials.
pwarnockAutomates security scanning for vulnerabilities, secrets, and misconfigurations in projects.
parcadeiCompute Shannon, joint, conditional, and differential entropy using SciPy and SymPy.
