Use when setting up security scanning, detecting secrets in code, implementing pre-commit hooks, or auditing SUI projects. Triggers on security setup, API key exposure risks, or security checklist verification.
From sui-dev-agentsnpx claudepluginhub first-mover-tw/sui-dev-agents --plugin sui-dev-agentsThis skill uses the workspace's default tool permissions.
references/examples.mdreferences/reference.mdscripts/pre-commit.shSearches prompts.chat for AI prompt templates by keyword or category, retrieves by ID with variable handling, and improves prompts via AI. Use for discovering or enhancing prompts.
Searches, retrieves, and installs Agent Skills from prompts.chat registry using MCP tools like search_skills and get_skill. Activates for finding skills, browsing catalogs, or extending Claude.
Compares coding agents like Claude Code and Aider on custom YAML-defined codebase tasks using git worktrees, measuring pass rate, cost, time, and consistency.
Automated security scanning and secret detection for SUI projects.
This skill provides comprehensive security scanning:
# Install pre-commit hook
sui-security-guard install-hook
# Manual scan
sui-security-guard scan
# Verify configuration
sui-security-guard check
Scans for:
suiprivkey1...)Automatically runs before each commit to prevent secrets from being committed.
Installation:
# Creates .git/hooks/pre-commit
sui-security-guard install-hook
Validates:
.sui-security.json:
{
"enabled": true,
"scan_on_commit": true,
"exclude_patterns": [
"node_modules/",
".git/",
"*.test.ts"
]
}
❌ Committing .env files
.env* to .gitignore, use .env.example for templates❌ Hardcoding private keys in code
❌ Disabling pre-commit hook "just once"
❌ Storing mnemonics in comments
❌ Not scanning existing codebase
❌ Testing with production API keys
sui-full-stack (throughout development)See reference.md for scan patterns and examples.md for remediation guides.