Summary
Scans your codebase for hardcoded credentials like AWS keys, GitHub tokens, Stripe keys, private keys, and database passwords. You can run it on specific directories, enable entropy detection for unknown formats, or even scan git history for secrets that were committed and later removed. The pattern library covers major providers (AWS, GCP, Stripe, Slack, Twilio) with both high-confidence exact matches and fuzzier generic patterns. Output shows severity levels and remediation steps. The ignore system handles false positives in test fixtures and docs. Good for that moment when you realize someone might have committed real credentials, or before open sourcing a private repo.
Install to Claude Code
npx -y skills add jwynia/agent-skills --skill secrets-scan --agent claude-codeInstalls into .claude/skills of the current project.
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →
Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
Files
SKILL.md
Select a file.
Featured
Plug Mailtrap into your AI workflow and let it handle the email.
Connect Mailtrap MCP →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →Make coding agent sessions - Searchable, Shareable, Vendor-neutral & Scored.
Try For Free →Your agent targets a perfect 10 Code Health score. Deterministic. Every commit.
Try For Free →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →belt cli automatically finds the best tools and skills for your agent. image, video, music, tts...
one prompt install →
