Scans git repositories for hardcoded secrets, credentials, and API keys to prevent security breaches and data leaks.
Secret Scanner is a specialized security utility that integrates Gitleaks into Claude Code to identify sensitive information within your codebase. It automates the detection of AWS keys, private certificates, and passwords, providing structured reports that include severity levels, specific file locations, and remediation steps. By mapping findings to Common Weakness Enumeration (CWE) standards, this skill helps developers maintain rigorous security posture and ensure that proprietary credentials never reach public repositories or production environments.
Key Features
01Direct mapping to CWE-798, CWE-259, and other security standards
02Support for JSON output and system readiness checks
03Comprehensive reporting with severity levels from low to critical
04Automated detection of API keys, passwords, and private credentials using Gitleaks
05Detailed finding metadata including commit history, author, and line numbers
062 GitHub stars
Use Cases
01Scanning legacy repositories for hardcoded passwords and tokens
02Generating security compliance reports for git-based projects
03Conducting pre-commit security audits to prevent credential leaks
