When is the best time to use this skill?

It is highly recommended to use this skill before committing changes to version control, during periodic security audits, or when refactoring legacy code.

How does the Secret Scanner detect keys?

It uses a combination of regex-based pattern matching for known service keys and entropy analysis to identify high-randomness strings typical of passwords and private keys.

What files does the scanner check?

The scanner analyzes your entire codebase, with a specific focus on configuration files like .env, .yaml, and .json, as well as source code files.

Does it automatically delete the secrets it finds?

No, it flags the location and provides remediation advice so you can safely move secrets to a secure vault or rotate them without breaking your application.

Can this scan for AWS or Google Cloud keys?

Yes, it is designed to recognize common patterns for major cloud providers, including AWS Access Keys, Google Cloud APIs, and Azure credentials.

Security Secret Scanner

Name: Security Secret Scanner
Author: jeremylongshore

byjeremylongshore

•

884

Security & Testing

Scans your codebase for exposed credentials, API keys, and private keys to prevent security breaches and accidental leaks.

About

This skill empowers Claude to proactively secure your repository by identifying hardcoded secrets, such as AWS keys, passwords, and SSH keys, using advanced pattern matching and entropy analysis. It streamlines the remediation process by providing detailed location reports and actionable suggestions, making it an essential tool for developers looking to maintain security standards before committing or deploying code to production.

Key Features

Comprehensive pattern matching for known API keys like AWS, Google, and Azure.
884 GitHub stars
Support for various file formats including configuration files and environment variables.
Advanced entropy analysis to detect high-randomness strings and hidden credentials.
Actionable remediation steps to help you secure or rotate exposed data.
Detailed vulnerability reporting with exact file locations and line numbers.

Use Cases

Finding and replacing plain-text passwords in configuration files with environment variables.
Verifying pull requests to ensure no sensitive data is accidentally committed to history.
Auditing a codebase for hardcoded credentials before making a repository public.

About

Key Features

Comprehensive pattern matching for known API keys like AWS, Google, and Azure.
884 GitHub stars
Support for various file formats including configuration files and environment variables.
Advanced entropy analysis to detect high-randomness strings and hidden credentials.
Actionable remediation steps to help you secure or rotate exposed data.
Detailed vulnerability reporting with exact file locations and line numbers.

Use Cases

Finding and replacing plain-text passwords in configuration files with environment variables.
Verifying pull requests to ensure no sensitive data is accidentally committed to history.
Auditing a codebase for hardcoded credentials before making a repository public.