trufflehog

Name: trufflehog
Availability: InStock
Author: Dave

Scan Git repositories, S3 buckets, filesystems, and CI systems for leaked credentials.

15|1|Updated Feb 12, 2026

Search Tags:#security #secrets #credentials #cloud security #trufflehog #code scanning

Ready to run

npx skills add https://github.com/AeonDave/malskill --skill trufflehog

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: trufflehog
Source: https://github.com/AeonDave/malskill/tree/main/offensive-tools/cloud/trufflehog
Command: npx skills add https://github.com/AeonDave/malskill --skill trufflehog

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This Skill helps identify and prevent sensitive information like credentials and API keys from being exposed in code repositories, cloud storage, and CI systems.

Core Features & Use Cases

Secret Detection: Utilizes over 700 detectors to find various types of secrets.
Broad Scanning: Supports scanning Git repositories, S3 buckets, local filesystems, and CI systems.
Use Case: When performing a security audit on a company's GitHub organization, use this Skill to scan all repositories for accidentally committed API keys.

Quick Start

Scan the GitHub repository at https://github.com/org/repo for leaked secrets.

Frequently Asked Questions about trufflehog

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan a Git repository for leaked secrets and API keys?▼

To scan a Git repository for leaked secrets, you can use this tool to automatically check the commit history for exposed credentials and API keys. It utilizes over 700 detectors to identify sensitive information across your codebase.

What types of cloud storage and CI systems can be checked for exposed credentials?▼

Exposed credentials can be checked across S3 buckets and CI systems. The scanner supports broad scanning of cloud storage to find accidentally committed secrets during security audits and cloud reconnaissance.

Do I need Docker or a Go binary to run secret detection on local filesystems?▼

Yes, executing secret detection on local filesystems requires either a Go binary or a Docker container for execution. This environment setup is necessary to run the entropy analysis and large detector set.

How does entropy analysis work for finding secrets in code?▼

Entropy analysis for finding secrets works by measuring the randomness of strings in code to detect high-entropy text. This mechanism identifies potential credentials that match specific detector patterns or exhibit random characteristics.

What is the best way to perform a security audit on a GitHub organization for leaked API keys?▼

The best way to perform a security audit for leaked API keys is using a scanner with over 700 detectors. This approach identifies various types of secrets across all repositories within a GitHub organization.