/scan-secrets

Description

Detect exposed secrets, API keys, tokens, passwords, and private keys using 50+ pattern signatures.

Install

Add the repository(one-time)

/plugin marketplace add dhofheinz/open-plugins

Install the plugin

/plugin install marketplace-validator-plugin@open-plugins

Namespace

security-scan/

Prompt Preview

## Operation: Scan for Exposed Secrets

Detect exposed secrets, API keys, tokens, passwords, and private keys using 50+ pattern signatures.

### Parameters from $ARGUMENTS

- **path**: Target directory or file to scan (required)
- **recursive**: Scan subdirectories (true|false, default: true)
- **patterns**: Specific pattern categories to check (optional, default: all)
- **exclude**: Patterns to exclude from scan (optional)
- **severity**: Minimum severity to report (critical|high|medium|low, default: medium)

### Secret Detection Patterns (50+)

**API Keys & Tokens**:
- Stripe: sk_live_, s...