Secret-leak-scan-lite – scan repos for leaked credentials before you commit
Free agent skill: statically scan a project directory for leaked credentials
以下正文同步自 Hacker News 最新，版权归原站所有，已转换为易读排版。
Free agent skill: statically scan a project directory for leaked credentials before committing. Masked fingerprints only — raw secret values are never emitted.
Detects: AWS access key IDs, GitHub personal access tokens, Slack tokens, PEM private-key blocks.
npx skills add NenadZivotic/secret-leak-scan-lite
or clone into your agent's skill directory:
git clone <repo> ~/.claude/skills/secret-leak-scan-lite
Use
Requires Node 18+, zero dependencies.
node scripts/scan.mjs <directory>
JSON report on stdout. Exit code 1 when findings are present — drop it straight into a pre-commit hook or CI step.
This is the lite edition. The full secret-leak-scan skill adds:
Full version on SkillHQ — also inside the security-audit-bundle-8-skills bundle ($29, 8 security skills).
正文由 探How 从来源站点 RSS 同步，内容未经改写；遇到排版缺失或需要图片、视频时请以原文为准。