# Baseline and Review Repository Secret Findings with detect-secrets

> Scan a repository for secrets, keep an auditable baseline, and review only newly introduced findings during commits or CI checks.

- Skill: `agentskillexchange/baseline-and-review-repository-secret-findings-with-detect-s` (Agent Skill)
- Install (CLI): `npx skillmds@latest add agentskillexchange/baseline-and-review-repository-secret-findings-with-detect-s`
- Raw SKILL.md: https://api.skillmd.com/api/skills/agentskillexchange/baseline-and-review-repository-secret-findings-with-detect-s/raw
- Safety review: pending (external: skill-scanner PASS, skillspector PASS)
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: agentskillexchange (https://skillmd.com/u/agentskillexchange)
- Updated: 2026-09-08
- Page: https://skillmd.com/skills/agentskillexchange/baseline-and-review-repository-secret-findings-with-detect-s

---


# Baseline and Review Repository Secret Findings with detect-secrets

Scan a repository for secrets, keep an auditable baseline, and review only newly introduced findings during commits or CI checks.

## Prerequisites

Python, detect-secrets CLI, git repository

## Installation

Use the upstream install or setup path that matches your environment:
- $ pip install detect-secrets
- $ brew install detect-secrets
- $ pip install detect-secrets[word_list]
- $ pip install detect-secrets[gibberish]

Requirements and caveats from upstream:
- python
- Specify path to custom filter. May be a python module
- is great for non-structured secrets, but may require tuning to adjust the scanning precision.

Basic usage or getting-started notes:
- Create a baseline of potential secrets currently found in your git repository.
- bash
- $ detect-secrets scan > .secrets.baseline

- Source: https://github.com/Yelp/detect-secrets
- Extracted from upstream docs: https://raw.githubusercontent.com/Yelp/detect-secrets/HEAD/README.md

## Documentation

- https://github.com/Yelp/detect-secrets

## Source

- [Agent Skill Exchange](https://agentskillexchange.com/skills/baseline-and-review-repository-secret-findings-with-detect-secrets/)