Scan your codebase for leaked secrets, API keys, and credentials before they hit production.
Scanned 9/7/2026
Install to Claude Code
Skills Directorynpx -y skills add Demerzels-lab/elsamultiskillagent --skill secret-scanner --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Secret Scanner?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/demerzels-lab-secret-scanner)More formats (shields.io, HTML) on the badges page.
# Secret Scanner
Scan your codebase for leaked secrets, API keys, and credentials before they hit production.
## Quick Start
```bash
npx ai-secret-scan
```
## What It Does
- Scans files for hardcoded secrets and API keys
- Detects common patterns (AWS, Stripe, GitHub tokens, etc.)
- Checks .env files for sensitive data exposure
- Warns about secrets in git history
- Zero config, instant results
## Usage
```bash
# Scan current directory
npx ai-secret-scan
# Scan specific path
npx ai-secret-scan ./src
```
## When to Use
- Before pushing to a public repo
- During security audits
- Setting up CI/CD pipelines
- Onboarding new team members
## Part of the LXGIC Dev Toolkit
One of 110+ free developer tools from LXGIC Studios. No paywalls, no sign-ups.
**Find more:**
- GitHub: https://github.com/lxgic-studios
- Twitter: https://x.com/lxgicstudios
- Substack: https://lxgicstudios.substack.com
- Website: https://lxgicstudios.com
## License
MIT. Free forever.
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Java Spring Boot 服务中关于身份验证/授权、验证、CSRF、密钥、标头、速率限制和依赖安全的 Spring Security 最佳实践。
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
Create, comment on, update, and list Paperclip tasks from Hermes using scoped Paperclip API credentials.
Write a short, colloquial summary for a Paperclip summary slot: open with the 1–3 specific, concrete actions the reader needs to take right now to unblock the work, then a brief plain-language status, streaming progress as it works.
Complete security architecture overhaul for claude-flow v3. Addresses critical CVEs (CVE-1, CVE-2, CVE-3) and implements secure-by-default patterns. Use for security-first v3 implementation.
