Secret Scanner

Security skill that scans code, config files, and repos for accidentally leaked secrets and credentials.

When to Use This Skill

Use this skill when the user:

• Asks to "check for leaked secrets" or "scan for API keys"
• Wants to audit a repo or folder before committing or publishing
• Says "are there any hardcoded passwords in this code?"
• Asks to "find credentials" or "check for exposed tokens"
• Wants pre-commit or pre-publish security checks
• Mentions concern about accidentally checking in secrets

Capabilities