secrets-scanner
Hunt for leaked credentials - hardcoded API keys, tokens, private keys, passwords and connection strings in code, config, logs and git history.
When to use
Use for /unmask, pre-commit secret sweeps, or "did we leak a key?" questions.
Inputs and tools
The skill takes the request of the user in natural language: its frontmatter declares no argument. It declares no allowed-tools: the tools available are those of the agent that loads it, under the tool policy of the project.
Reference
| Field | Value |
|---|---|
| Name | secrets-scanner |
| Category | Security |
| Version | Not declared |
| Licence | Not declared |
| Allowed tools | Not declared |
| Plugins | - |
| Source | catalog/navin/skills/secrets-scanner/SKILL.md |
| Digest | sha256:8d6276b76c784a6a0b0fe0e97168cc27603eb15cf3f4e8bae00739445a77b446 |
skill_md_digest | sha256:f1f5f8bc51bc46acfb72b3f85ceb4c6de54e3f133e959dc9634ec73ed6a2e29f |
| Emoji | 🔑 |
Frontmatter
Every field of the SKILL.md frontmatter, with the value of the source:
| Field | Value |
|---|---|
name | secrets-scanner |
description | Hunt for leaked credentials - hardcoded API keys, tokens, private keys, passwords and connection strings in code, config, logs and git history. Use for /unmask, pre-commit secret sweeps, or "did we leak a key?" questions. |
metadata.navin.emoji | 🔑 |
metadata.navin.category | security |