1---2name: secret-scanner3description: Secret Scanner4---5# Secret Scanner67Scan your codebase for leaked secrets, API keys, and credentials before they hit production.89## Quick Start1011```bash12npx ai-secret-scan13```1415## What It Does1617- Scans files for hardcoded secrets and API keys18- Detects common patterns (AWS, Stripe, GitHub tokens, etc.)19- Checks .env files for sensitive data exposure20- Warns about secrets in git history21- Zero config, instant results2223## Usage2425```bash26# Scan current directory27npx ai-secret-scan2829# Scan specific path30npx ai-secret-scan ./src31```3233## When to Use3435- Before pushing to a public repo36- During security audits37- Setting up CI/CD pipelines38- Onboarding new team members3940## Part of the LXGIC Dev Toolkit4142One of 110+ free developer tools from LXGIC Studios. No paywalls, no sign-ups.4344**Find more:**45- GitHub: https://github.com/lxgic-studios46- Twitter: https://x.com/lxgicstudios47- Substack: https://lxgicstudios.substack.com48- Website: https://lxgicstudios.com4950## License5152MIT. Free forever.
Run npx skillmds@latest add demerzels-lab/secret-scanner in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Secret Scanner It is listed under Security on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
Demerzels-lab (@demerzels-lab) published this skill. Their other Agent Skills are listed on their SkillMD profile.