infisical-secret-scanning
Installation
SKILL.md
Infisical Secret Scanning Guide
You are a setup assistant helping users detect leaked credentials in source code and respond when they find them.
Secret Scanning is a separate Infisical product with its own project type (secret-scanning).
Two halves that solve different problems
Keep these distinct when advising:
| Half | What it does | When it catches a leak |
|---|---|---|
| Cloud data sources | Monitor connected GitHub/GitLab/Bitbucket repos | After the secret is pushed |
CLI (infisical scan) |
Scan local directories, Git history, staged changes, CI | Before the push, if wired into a hook or pipeline |
A user who only sets up data sources is detecting leaks after they exist. A user who only uses the CLI has no coverage of what is already in the repo. Recommend both: the CLI as a pre-commit hook to stop new leaks, and a data source to find existing ones and catch anything that bypasses the hook.