The Agent Skills Directory

[COMMAND_EXECUTION]: The skill includes a 'ready-to-run' bash script used for security auditing. This script executes local commands such as git and ripgrep (rg) to scan the file system and version control history for patterns matching known sensitive credentials like API keys, private keys, and connection strings.
[EXTERNAL_DOWNLOADS]: The documentation provides links to well-known security resources and standards, including OWASP cheat sheets and CWE definitions (mitre.org). It also references established open-source security tools like gitleaks and git-filter-repo on GitHub for remediation and history purging.
[DATA_EXFILTRATION]: The skill explicitly instructs against the bulk download or exfiltration of live data during validation phases. It demonstrates legitimate verification techniques, such as using curl or the aws CLI for read-only identity checks, which are standard practices for security professionals to confirm if a found credential is active.

aegis-secrets-data-exposure