secrets-scanner
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to install
pre-commitvia pip and utilizes official GitHub Actions from reputable organizations (actions/checkout,gitleaks/gitleaks-action, andtrufflesecurity/trufflehog) for CI integration. - [COMMAND_EXECUTION]: Provides standard shell commands for environment setup and tool execution, such as
pip install pre-commit,pre-commit install, andbfg --replace-textfor secret remediation. - [DATA_EXPOSURE]: The skill includes hardcoded example credentials (e.g., dummy AWS and Stripe keys) strictly for educational purposes within a 'BAD' practices section to demonstrate what the scanner should detect. These do not represent actual sensitive data leakage.
- [DYNAMIC_EXECUTION]: Contains TypeScript and YAML templates for secret scanning and environment validation. These are intended as implementation guides for the developer and are not executed dynamically by the agent platform itself.
Audit Metadata