wiki-secret-audit

What problem does it solve?

Many documentation wiki pages accidentally contain credentials, API keys, tokens, or connection strings that bypass standard repository secret scanners; this Skill finds those exposures and guides safe remediation to reduce blast radius after incidents.

Core Features & Use Cases

• Pattern-based detection: Searches pages for high-priority secret patterns such as connection strings, bearer tokens, API keys, and private key blocks.
• Scoped auditing: Supports single-page, collection, or search-driven scopes to prioritize high-risk areas like runbooks, environment configs, and setup guides.
• Actionable reporting: Produces a dated audit report that lists findings, clean pages, and prescriptive remediation steps (remove/redact, rotate, notify).
• Use Case: Run during post-incident investigations or scheduled security reviews to locate leaked credentials that were published to wiki pages.

Quick Start

Scan the specified wiki space for exposed credentials and generate a remediation-focused audit report listing detected secrets, affected pages, and recommended next steps.