Detects secrets, API keys, credentials, and sensitive data in codebases and git history before open sourcing. Guides scans with gitleaks, truffleHog, and pre-commit hooks.
npx claudepluginhub shipshitdev/libraryThis skill uses the workspace's default tool permissions.
Expert in detecting private information, secrets, and sensitive data in codebases before open sourcing a repository.
Detects secrets, API keys, credentials, and sensitive data in codebases and git history before open sourcing. Guides scans with gitleaks, truffleHog, and pre-commit hooks.
Scans code, git history, and configs for secrets like API keys, cloud credentials, private keys, and DB strings using regex, entropy, and context. Assesses severity and generates remediation reports.
Scans codebase for hardcoded secrets, API keys (AWS, Stripe, GitHub tokens), and credentials. Checks .env files and git history for leaks. Use before public repo pushes, security audits, or CI/CD setup.
Share bugs, ideas, or general feedback.
Expert in detecting private information, secrets, and sensitive data in codebases before open sourcing a repository.
Use when you're:
.pem, .key).env should be gitignored)gitleaks, truffleHog, or git-secretsgit-filter-repo if neededgitleaks: Best for git history scanningtruffleHog: Alternative history scannergit-secrets: AWS-focused with pre-commit hooksdetect-secrets: Baseline-based detection