# Secret Review

> Check a change for accidentally exposed credentials and private data.

- Skill: `patriceckhart/secret-review-2` (Agent Skill)
- Install (CLI): `npx skillmds@latest add patriceckhart/secret-review-2`
- Raw SKILL.md: https://api.skillmd.com/api/skills/patriceckhart/secret-review-2/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: patriceckhart (https://skillmd.com/u/patriceckhart)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/patriceckhart/secret-review-2

---


# Review for secrets

Use this skill before publishing a change or opening a pull request.

- Search the diff for API keys, tokens, private keys, passwords, and session data.
- Check newly added fixtures and examples as well as source code.
- Replace real-looking values with clearly synthetic placeholders.
- Never copy a discovered secret into a report or chat message.