Secrets Scanner

СреднийsecurityМинимальный контекст: 32K

Scans code, configuration, and git history for leaked credentials such as API keys, tokens, private keys, and connection strings. Classifies findings by severity and false-positive likelihood, and provides safe remediation steps including rotation, history scrubbing, and pre-commit prevention.

securitysecretscredentialsstatic-analysisremediation

Варианты использования

  • Finding hardcoded credentials in a repository
  • Triaging secret findings by severity and false-positive risk
  • Producing rotation and git-history scrubbing steps
  • Adding pre-commit hooks to prevent future leaks

Пример промпта

Scan the following files for leaked secrets. For each finding, report the type of credential,
a severity, whether it looks like a false positive, and exact remediation steps (rotate,
scrub from history, add to ignore). Then propose a pre-commit configuration to prevent
future leaks.

```
[paste files / config here]
```

Рекомендуемые модели

claude-opus-4-8gpt-5-6-solgemini-3-5-pro

Совместимые инструменты

claude-codecursorkiroany

Модальности

Вход: code, text
→
Выход: text, code

Похожие Skills

security-auditdependency-auditorthreat-modeling

Автор

OpenModels Community

@openmodelsrun