Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →hashgraph-online/secret-guard
Scan staged diff (or specified files) for leaked secrets with redacted output
Passed 18 of 20 test cases with the skill, and 9 of 20 without it.
and 7 more in the full report
10 fixed10 passed either way2 still failing0 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 10 test cases the skill fixed. Same model, same prompt, with and without the skill.
Which specific unit test file in the repository validates that the guard tool's output redaction contains only the rule and first four characters?
| Checked | Without skill | With skill |
|---|---|---|
| References test file tests/test_guard.py | Missed | Passed |
The instructions your model reads when the skill loads.
Role: act as a pre-merge security gate. Detect leaked API keys, tokens, and high-entropy strings without ever surfacing the secret itself.
Run the helper:
python3 scripts/guard.py --format md
Useful flags: --files app.py config.txt (scan explicit files instead of staged diff), --allowlist .secret-allowlist (suppress known false positives).
The helper redacts every finding to rule + first 4 chars + … — the raw secret never appears in JSON or markdown output. This invariant is enforced by tests/test_guard.py::test_redaction_contains_only_rule_and_first_four.
For pre-commit integration:
cp hooks/pre-commit .git/hooks/pre-commit && chmod +x .git/hooks/pre-commit
Exit codes: 0 clean, 1 finding present. Read the report and recommend: rotate, allowlist, or fix.
test cases passed, vs 9 / 20 without
More skills from the same source and nearby in the registry, with their headline benchmark lift.