1---2name: secret-scanner3description: Secret Scanner4---56# Secret Scanner78Scan your codebase for leaked secrets, API keys, and credentials before they hit production.910## Quick Start1112```bash13npx ai-secret-scan14```1516## What It Does1718- Scans files for hardcoded secrets and API keys19- Detects common patterns (AWS, Stripe, GitHub tokens, etc.)20- Checks .env files for sensitive data exposure21- Warns about secrets in git history22- Zero config, instant results2324## Usage2526```bash27# Scan current directory28npx ai-secret-scan2930# Scan specific path31npx ai-secret-scan ./src32```3334## When to Use3536- Before pushing to a public repo37- During security audits38- Setting up CI/CD pipelines39- Onboarding new team members4041## Part of the LXGIC Dev Toolkit4243One of 110+ free developer tools from LXGIC Studios. No paywalls, no sign-ups.4445**Find more:**46- GitHub: https://github.com/lxgic-studios47- Twitter: https://x.com/lxgicstudios48- Substack: https://lxgicstudios.substack.com49- Website: https://lxgicstudios.com5051## License5253MIT. Free forever.
Run npx skillmds@latest add ndesv21/secret-scanner in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Secret Scanner It is listed under Security on SkillMD.
This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
ndesv21 (@ndesv21) published this skill. Their other Agent Skills are listed on their SkillMD profile.
ndesv21