Secrets Scanner

IntermediasecurityContexto mínimo: 32K

Scans code, configuration, and git history for leaked credentials such as API keys, tokens, private keys, and connection strings. Classifies findings by severity and false-positive likelihood, and provides safe remediation steps including rotation, history scrubbing, and pre-commit prevention.

securitysecretscredentialsstatic-analysisremediation

Casos de uso

  • Finding hardcoded credentials in a repository
  • Triaging secret findings by severity and false-positive risk
  • Producing rotation and git-history scrubbing steps
  • Adding pre-commit hooks to prevent future leaks

Prompt de ejemplo

Scan the following files for leaked secrets. For each finding, report the type of credential,
a severity, whether it looks like a false positive, and exact remediation steps (rotate,
scrub from history, add to ignore). Then propose a pre-commit configuration to prevent
future leaks.

```
[paste files / config here]
```

Modelos recomendados

claude-opus-4-8gpt-5-6-solgemini-3-5-pro

Herramientas compatibles

claude-codecursorkiroany

Modalidades

Entrada: code, text
→
Salida: text, code

Skills relacionadas

security-auditdependency-auditorthreat-modeling

Autor

OpenModels Community

@openmodelsrun