skills.rest
ClearMeasureLabs
ClearMeasureLabsOFFICIAL
Explore all skills by this author →
WebsiteGitHub

trufflehog-secret-scan

Scan modified code segments for leaked credentials using TruffleHog.

3|2|Updated Aug 1, 2025
Search Tags:#git#security#compliance#secrets#code-scanning#trufflehog
One-click install
npx skills add https://github.com/ClearMeasureLabs/bootcamp-palermo-workorders --skill trufflehog-secret-scan
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: trufflehog-secret-scan
Source: https://github.com/ClearMeasureLabs/bootcamp-palermo-workorders/tree/main/.claude/skills/trufflehog
Command: npx skills add https://github.com/ClearMeasureLabs/bootcamp-palermo-workorders --skill trufflehog-secret-scan

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires trufflehog, and includes scripts (resource) components.

What problem does it solve?

This skill prevents security breaches by identifying hardcoded API keys, tokens, and credentials in your codebase before they are committed or pushed to a repository.

Core Features & Use Cases

  • Targeted Scanning: Scans only the changed code (staged, unstaged, or specific git ranges) to ensure high performance and low noise.
  • Verified Detection: Uses TruffleHog to verify if detected credentials are live and active, prioritizing critical security risks.
  • Use Case: Before pushing a new feature branch, run this scan to ensure no development API keys or database credentials were accidentally included in your recent commits.

Quick Start

Use the trufflehog-secret-scan skill to check all uncommitted changes in the current repository for potential security leaks.

Frequently Asked Questions about trufflehog-secret-scan

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan modified code segments for leaked secrets before committing?▼

To scan modified code for leaked secrets, this skill targets working directories, staged changes, and git commit ranges to identify sensitive data exposure using TruffleHog. It ensures high performance by scanning only the changed code segments rather than the entire repository.

How does TruffleHog verify if detected API keys and credentials are live?▼

TruffleHog verifies detected API keys and credentials by checking if they are live and active. This verified detection mechanism prioritizes critical security risks, ensuring you only act on credentials that pose an actual threat.

Do I need to install TruffleHog separately to scan git commits for security leaks?▼

Yes, you must install the TruffleHog binary separately to scan git commits for security leaks. The binary must be installed and accessible in the system path for the skill to execute successfully.

What is the best way to prevent hardcoded database credentials from reaching a git repository?▼

The best way to prevent hardcoded database credentials from reaching a git repository is running a targeted scan on uncommitted changes. This detects development API keys and tokens before they are pushed, preventing sensitive data exposure.

Can I check uncommitted changes in my current repository for potential security leaks?▼

Yes, you can check uncommitted changes in your current repository for potential security leaks. The skill operates across working directories and staged changes to proactively identify and validate leaked credentials before a push.

Related Skills

Explore More Software Engineering Skills→
zachmayerzachmayer
2

trufflehog

Scan git repositories and local filesystems for leaked credentials and secrets.

Community
Intermediate
drvossdrvoss
42

secret-detection

Detect hardcoded API keys, tokens, and passwords in source code and git history.

Community
Intermediate
the-perfect-developerthe-perfect-developer
11

git-hooks

Automate local Git workflow validation with pre-commit checks and push triggers.

Community
Advanced
dandawateydandawatey

Secure Code Guardian

Automate security reviews of code commits against OWASP Top 10.

Community
Advanced