# Secret Scan

> 扫描硬编码密钥与凭证

- Skill: `liuyanghejerry/secret-scan` (Agent Skill)
- Install (CLI): `npx skillmds@latest add liuyanghejerry/secret-scan`
- Raw SKILL.md: https://api.skillmd.com/api/skills/liuyanghejerry/secret-scan/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: liuyanghejerry (https://skillmd.com/u/liuyanghejerry)
- Updated: 2026-09-22
- Page: https://skillmd.com/skills/liuyanghejerry/secret-scan

---


# 硬编码凭证扫描

- 源码或数据文件中的 API key、password、token
- rule_id: `hardcoded-secret`
- severity: `error`

只报告实际存在的凭证；没有时返回空 findings。

先用 `git_diff`（参数 `{"base": "HEAD~1"}`）查看本次变更。