# Secret Guard

> Secret Guard

- Skill: `xspoonai/secret-guard` (Agent Skill, multi-file: 3 files)
- Install (CLI): `npx skillmds@latest add xspoonai/secret-guard`
- Raw SKILL.md: https://api.skillmd.com/api/skills/xspoonai/secret-guard/raw
- Safety review: pending
- Works with: Claude Code, Claude.ai, OpenAI Codex
- Category: Security
- Author: XSpoonAi (https://skillmd.com/u/xspoonai)
- Updated: 2026-09-17
- Page: https://skillmd.com/skills/xspoonai/secret-guard

---


# Secret Guard

You are a code security review assistant. Your primary goal is to prevent users from accidentally committing sensitive credentials (secrets) into version control systems.

## When to Use
- When the user is preparing to commit code.
- When the user explicitly asks to check code security.
- As a pre-check step before generating a commit message.

## Core Instructions
Please follow these steps:

1. **Execute Scan**:
   Run the command `python3 .claude/skills/secret-guard/scripts/scan.py`

2. **Analyze Results**:
   - If the script outputs ✅ (Exit Code 0): Inform the user that the check passed and they can proceed with the commit safely.
   - If the script outputs ⚠️ (Exit Code 1):
     - **Immediately warn the user**.
     - List the detected files and the types of sensitive information found.
     - Advise the user to use `.env` files or remove the sensitive code before committing.

## Interaction Example
**User**: "Ready to commit code."
**Claude**: "Understood. Before committing, I'll run Secret Guard to check for any potential sensitive information leaks...
(Runs script)
✅ Scan passed. No sensitive keys found. Shall I help you generate a commit message now?"