Detect hardcoded secrets (API keys, tokens, passwords) in text or code
Scanned 9/7/2026
Install to Claude Code
Skills Directorynpx -y skills add modbender/skill-library-mcp --skill expanso-secrets-scan --agent claude-codeInstalls into .claude/skills of the current project.
Are you the author of Expanso Secrets Scan?
Add the live security badge to your README — it updates automatically with every re-scan.
[](https://www.skillsdirectory.com/skills/modbender-expanso-secrets-scan)More formats (shields.io, HTML) on the badges page.
---
name: secrets-scan
description: Detect hardcoded secrets (API keys, tokens, passwords) in text or code
---
# secrets-scan
Detect hardcoded secrets (API keys, tokens, passwords) in text or code
## Requirements
- Expanso Edge installed (`expanso-edge` binary in PATH)
- Install via: `clawhub install expanso-edge`
## Usage
### CLI Pipeline
```bash
# Run standalone
echo '<input>' | expanso-edge run pipeline-cli.yaml
```
### MCP Pipeline
```bash
# Start as MCP server
expanso-edge run pipeline-mcp.yaml
```
### Deploy to Expanso Cloud
```bash
expanso-cli job deploy https://skills.expanso.io/secrets-scan/pipeline-cli.yaml
```
## Files
| File | Purpose |
|------|---------|
| `skill.yaml` | Skill metadata (inputs, outputs, credentials) |
| `pipeline-cli.yaml` | Standalone CLI pipeline |
| `pipeline-mcp.yaml` | MCP server pipeline |
Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.
No comments yet. Be the first to comment!
Use this skill when adding authentication, handling user input, working with secrets, creating API endpoints, or implementing payment/sensitive features. Provides comprehensive security checklist and patterns.
