# Secret Scanner

> Secret Scanner

- Skill: `ndesv21/secret-scanner` (Agent Skill, multi-file: 11 files)
- Install (CLI): `npx skillmds@latest add ndesv21/secret-scanner`
- Raw SKILL.md: https://api.skillmd.com/api/skills/ndesv21/secret-scanner/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: ndesv21 (https://skillmd.com/u/ndesv21)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/ndesv21/secret-scanner

---


# Secret Scanner

Scan your codebase for leaked secrets, API keys, and credentials before they hit production.

## Quick Start

```bash
npx ai-secret-scan
```

## What It Does

- Scans files for hardcoded secrets and API keys
- Detects common patterns (AWS, Stripe, GitHub tokens, etc.)
- Checks .env files for sensitive data exposure
- Warns about secrets in git history
- Zero config, instant results

## Usage

```bash
# Scan current directory
npx ai-secret-scan

# Scan specific path
npx ai-secret-scan ./src
```

## When to Use

- Before pushing to a public repo
- During security audits
- Setting up CI/CD pipelines
- Onboarding new team members

## Part of the LXGIC Dev Toolkit

One of 110+ free developer tools from LXGIC Studios. No paywalls, no sign-ups.

**Find more:**
- GitHub: https://github.com/lxgic-studios
- Twitter: https://x.com/lxgicstudios
- Substack: https://lxgicstudios.substack.com
- Website: https://lxgicstudios.com

## License

MIT. Free forever.