skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

vuln-sensitive-exposure

Detect exposed credentials, PII, and debug data in web applications and cloud infrastructure.

Updated Jul 30, 2026
Search Tags:#security#vulnerability#reconnaissance#compliance#redaction#pentest
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill vuln-sensitive-exposure
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vuln-sensitive-exposure
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/vuln-sensitive-exposure
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill vuln-sensitive-exposure

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies and validates inadvertent sensitive data exposure, such as leaked credentials, PII, or debug information, ensuring security teams can remediate vulnerabilities before they are exploited.

Core Features & Use Cases

  • Automated Discovery: Scans API responses, client-side JavaScript, and debug endpoints for exposed secrets and configuration data.
  • Cloud Misconfiguration Checks: Detects publicly accessible cloud storage buckets and Git repositories.
  • Evidence Redaction: Automatically enforces strict redaction protocols for all findings to ensure sensitive data is never stored in logs.

Quick Start

Use the vuln-sensitive-exposure skill to scan the authorized target for exposed API keys and debug endpoints while maintaining strict evidence redaction.

Frequently Asked Questions about vuln-sensitive-exposure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I scan web applications for sensitive data exposure and leaked credentials?▼

To scan web applications for sensitive data exposure, you can automatically discover leaked credentials and debug endpoints by scanning API responses and client-side JavaScript while enforcing strict evidence redaction protocols.

What is the best way to detect exposed Git repositories and cloud misconfigurations during reconnaissance?▼

Detecting exposed Git repositories and cloud misconfigurations involves checking for publicly accessible cloud storage buckets and insecure API responses within defined pentest scopes to identify inadvertent sensitive data disclosure.

How does evidence redaction work when validating exposed PII and debug data?▼

Evidence redaction automatically enforces strict protocols for all findings of exposed PII and debug data, ensuring that sensitive information is validated securely and never stored in logs during compliance assessments.

Can I use automated discovery to find insecure API responses in cloud infrastructure?▼

Yes, you can use automated discovery to find insecure API responses in cloud infrastructure by scanning for misconfigured endpoints and exposed secrets, provided you operate within authorized pentest scopes and pass authorization gates.

Do I need defined pentest scopes to check for sensitive information disclosure?▼

Yes, you need defined pentest scopes to check for sensitive information disclosure, as strict authorization gates are required to ensure safe, compliant security assessments of misconfigured endpoints and exposed credentials.

What types of sensitive information disclosure can be found in client-side JavaScript?▼

Sensitive information disclosure in client-side JavaScript typically includes exposed secrets, leaked credentials, PII, and configuration data, which can be automatically discovered and validated during security reconnaissance.

Related Skills

Explore More Software Engineering Skills→
markwang2658markwang2658
31

web-pentest

Automate authorized web-application penetration testing from reconnaissance to reporting.

Community
Advanced
bobvarkeybobvarkey

security-audit

Identify and remediate security misconfigurations and exposed credentials in Clawdbot deployments.

Community
Advanced
EntroVyxEntroVyx
3

hardcoded-credential-hunt

Scan HTML, JavaScript, and API responses for hardcoded credentials.

Community
Intermediate
yoanbernabeuyoanbernabeu
62

supabase-audit-buckets-public

Identify publicly accessible storage buckets in Supabase projects.

Community
Basic