Is it safe to run on my local codebase?

Yes, the skill uses standard local tools like Grep and Bash to analyze your files locally within the Claude Code environment.

Can this skill scan environment variables?

Yes, it specifically targets configuration files, .env files, and source code where secrets are often accidentally hardcoded.

How does the Secret Scanner find hidden credentials?

It utilizes a dual-approach: regex-based pattern matching for known service formats (like AWS Access Keys) and entropy analysis to detect high-randomness strings that typically signify passwords or private keys.

Does it provide advice on how to fix found vulnerabilities?

Absolutely. After identifying a secret, Claude provides a report listing the location and recommended remediation steps, such as revoking the key or moving it to a secure secret manager.

Can I use this for pre-commit checks?

Yes, it is a best practice to trigger the Secret Scanner before committing changes to ensure no sensitive data is accidentally pushed to version control.

Secret Scanner

Name: Secret Scanner
Author: BbgnsurfTech

byBbgnsurfTech

•

Security & Testing

Identifies and remediates exposed API keys, passwords, and sensitive credentials within your codebase using pattern matching and entropy analysis.

About

The Secret Scanner skill empowers Claude to proactively secure your development environment by detecting hardcoded credentials, private keys, and API tokens before they reach production. By combining regex-based pattern matching for major providers like AWS and Google Cloud with entropy analysis to find high-randomness strings, it provides a comprehensive security audit of your configuration files and source code. This skill is essential for maintaining a robust security posture, preventing unauthorized access, and automating the discovery of potential vulnerabilities within your local or version-controlled repositories.

Key Features

3 GitHub stars
Seamless integration with local Grep and Bash tools for rapid analysis
Entropy analysis to identify custom or non-standard secrets
Pattern-based detection for AWS, GCP, and Azure credentials
Automated scanning of configuration files and environment variables
Detailed reporting with exact file locations and remediation steps

Use Cases

Proactive credential scanning during development to ensure environment variable compliance
Pre-commit security audits to prevent leaking secrets to public repositories
Cleaning up legacy codebases containing hardcoded passwords or private keys

About

Key Features

3 GitHub stars
Seamless integration with local Grep and Bash tools for rapid analysis
Entropy analysis to identify custom or non-standard secrets
Pattern-based detection for AWS, GCP, and Azure credentials
Automated scanning of configuration files and environment variables
Detailed reporting with exact file locations and remediation steps

Use Cases

Proactive credential scanning during development to ensure environment variable compliance
Pre-commit security audits to prevent leaking secrets to public repositories
Cleaning up legacy codebases containing hardcoded passwords or private keys