Security: Secret Detection

This skill activates when performing secret detection, credential scanning, or implementing security checks for leaked sensitive data in code repositories.

When to Use This Skill

Activate when:

• Scanning repositories for leaked secrets, API keys, or credentials
• Setting up pre-commit hooks for secret detection
• Auditing codebases for exposed passwords or tokens
• Implementing CI/CD security pipelines
• Checking git history for accidentally committed secrets
• Validating that .gitignore excludes sensitive files

Pre-Commit Hook (Automatic)

When this skill is loaded, a pre-commit hook automatically scans staged files for secrets before every git commit command. This provides defense-in-depth by catching secrets before they enter git history.

Hook Behavior