git-leak-recovery

Installation
SKILL.md

Git Leak Recovery

Overview

This skill guides the process of recovering sensitive data (secrets, credentials, API keys) that have been removed from Git history through history-rewriting operations, extracting the data, and then securely cleaning the repository to ensure complete removal.

Key Concepts

Git Object Persistence

When commits are "removed" via operations like git reset, git rebase, or git commit --amend, the underlying Git objects are not immediately deleted. They become "unreachable" but persist in the repository until garbage collection occurs. This behavior enables recovery but also means secrets remain accessible until explicit cleanup.

Common Hiding Places for Secrets

When searching for removed secrets, check these locations in order of likelihood:

  1. Reflog - Most common location for rewritten history (git reflog)
  2. Dangling commits - Commits with no branch reference (git fsck --unreachable)
  3. Stashes - Often overlooked (git stash list)
Related skills

More from letta-ai/skills

Installs
35
Repository
letta-ai/skills
GitHub Stars
97
First Seen
Jan 24, 2026