vuln-sensitive-exposure

Detect exposed credentials, PII, and debug data in web applications and cloud infrastructure.

Updated Jul 30, 2026

Search Tags:#security #vulnerability #reconnaissance #compliance #redaction #pentest

Ready to run

npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill vuln-sensitive-exposure

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: vuln-sensitive-exposure
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/vuln-sensitive-exposure
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill vuln-sensitive-exposure

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill identifies and validates inadvertent sensitive data exposure, such as leaked credentials, PII, or debug information, ensuring security teams can remediate vulnerabilities before they are exploited.

Core Features & Use Cases

Automated Discovery: Scans API responses, client-side JavaScript, and debug endpoints for exposed secrets and configuration data.
Cloud Misconfiguration Checks: Detects publicly accessible cloud storage buckets and Git repositories.
Evidence Redaction: Automatically enforces strict redaction protocols for all findings to ensure sensitive data is never stored in logs.

Quick Start

Use the vuln-sensitive-exposure skill to scan the authorized target for exposed API keys and debug endpoints while maintaining strict evidence redaction.

Frequently Asked Questions about vuln-sensitive-exposure

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I scan web applications for sensitive data exposure and leaked credentials?▼

To scan web applications for sensitive data exposure, you can automatically discover leaked credentials and debug endpoints by scanning API responses and client-side JavaScript while enforcing strict evidence redaction protocols.

What is the best way to detect exposed Git repositories and cloud misconfigurations during reconnaissance?▼

Detecting exposed Git repositories and cloud misconfigurations involves checking for publicly accessible cloud storage buckets and insecure API responses within defined pentest scopes to identify inadvertent sensitive data disclosure.

How does evidence redaction work when validating exposed PII and debug data?▼

Evidence redaction automatically enforces strict protocols for all findings of exposed PII and debug data, ensuring that sensitive information is validated securely and never stored in logs during compliance assessments.

Can I use automated discovery to find insecure API responses in cloud infrastructure?▼

Yes, you can use automated discovery to find insecure API responses in cloud infrastructure by scanning for misconfigured endpoints and exposed secrets, provided you operate within authorized pentest scopes and pass authorization gates.

Do I need defined pentest scopes to check for sensitive information disclosure?▼

Yes, you need defined pentest scopes to check for sensitive information disclosure, as strict authorization gates are required to ensure safe, compliant security assessments of misconfigured endpoints and exposed credentials.

What types of sensitive information disclosure can be found in client-side JavaScript?▼

Sensitive information disclosure in client-side JavaScript typically includes exposed secrets, leaked credentials, PII, and configuration data, which can be automatically discovered and validated during security reconnaissance.