{"slug":"jeremylongshore-detecting-exposed-secrets-files","source_name":"jeremylongshore/detecting-exposed-secrets-files","name":"Jeremylongshore/Detecting Exposed Secrets Files","description":"Probe a target for accidentally-served secret-bearing files in the web root\n— `.git/`, `.env`, `.DS_Store`, backup files, database dumps, key files,\nCI configs, IDE configs.\nUse when: post-deploy verification on a new release, or SOC2 auditor asked\n\"what's reachable in the web root that shouldn't be,\" or a bug-bounty\nreport hints at a leaked file.\nThreshold: any of the canonical 40+ paths returns 200 OR returns a body\nmatching the expected fingerprint of the file type (e.g., `.git/HEAD`\nreturns ","version":1,"lift":{"pass_rate_delta_pts":36.36,"pass_rate_pct":86.4,"total_cases":22,"passed_cases":19,"tokens_delta_pct":61,"turns_delta_pct":0,"verdict":"mixed","benchmark_model":"gemini-3.6-flash","grading_method":"judged","completed_at":"2026-08-14T12:01:55.063147+00:00"},"skill_score":0.8636,"benchmark_models":[{"model":"gemini-3.6-flash","headline":true,"delta_pts":36.36,"with_pass_pct":86.4,"without_pass_pct":50,"tokens_delta_pct":61,"turns_delta_pct":0,"total_cases":22,"cases_aggregated":20,"verdict":"mixed","never_hurt":true,"completed_at":"2026-08-14T12:01:55.063147+00:00","run_id":"a6a611f4-5878-4488-9d2b-3dce0b3676aa","version_number":1,"is_latest_version":true,"gate":null}],"trust":{"skill_safety":"passed","safety_status":"clean","intent_verdict":"safe","content_status":"clean","indexable":true},"license":"MIT","install_count":0,"manifest_hash":"2340a485c575cb89148f2c11795e360eadb4bbcd43caa5592b11be7a207a1be0","raw_url":"https://app.decimal.ai/s/jeremylongshore-detecting-exposed-secrets-files/SKILL.md","scorecard_url":"https://app.decimal.ai/skills/jeremylongshore-detecting-exposed-secrets-files"}