Hardcoded Secrets
Overview
Detects API keys, passwords, and tokens embedded directly in the source code.
Remediation
Use a secure secrets manager or environment variables to inject sensitive credentials at runtime.
Hardcoded Secrets
Detects API keys, passwords, and tokens embedded directly in the source code.
zakirkun Updated Hardcoded Secrets by zakirkun · 92568b8
npx skillmds@latest add zakirkun/hardcoded-secrets File contents
---name: hardcoded-secretsdescription: Detects API keys, passwords, and tokens embedded directly in the source code.---# Hardcoded Secrets## OverviewDetects API keys, passwords, and tokens embedded directly in the source code.## RemediationUse a secure secrets manager or environment variables to inject sensitive credentials at runtime.
zakirkun/ice-tea/tree/main/skills/auth/hardcoded-secrets commit 92568b8696
Frequently asked questions
Run npx skillmds@latest add zakirkun/hardcoded-secrets in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.
Detects API keys, passwords, and tokens embedded directly in the source code. It is listed under Integrations & APIs on SkillMD.
SkillMD's automated safety review verdict for this skill is PASS. Independent scanners report: SkillSpector: PASS, Skill Scanner: PASS. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.
This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.
Yes. Installing skills from SkillMD is free, and the skill stays under its author's original license.
zakirkun (@zakirkun) published this skill. Their other Agent Skills are listed on their SkillMD profile.