TruffleHog

Purpose

Use this skill when the engagement needs broader secret discovery across approved repositories, filesystems, or version history.

Phase Fit

• Primary: Vulnerability Analysis
• Secondary: Retest and Closure

Use When

• Need to inspect approved code or history for token or credential exposure.
• Need deeper secret discovery than a simple working-tree scan.
• Need a repeatable retest after cleanup.

Avoid When