Loading skill
Install any skill in seconds. Free to start, no credit card required.
Get Started Free →miosa-osa/secret-scan
Scans the codebase (and optionally git history) for exposed secrets: AWS credentials, API keys, private keys, database connection strings, JWT tokens, and other sensitive data. Reports findings with exact file locations and remediation steps.
Passed 13 of 23 test cases with the skill, and 11 of 23 without it.
and 3 more in the full report
5 fixed9 passed either way8 still failing2 broke
Tokens, turns and time describe resource use, not a dollar price.
One of 5 test cases the skill fixed. Same model, same prompt, with and without the skill.
A developer removed an API key in the latest commit, but we want to scan past git commits to ensure it wasn't committed earlier. What specific option flag should be passed to the secret scanning tool?
| Checked | Without skill | With skill |
|---|---|---|
| Specifies the `--git-history` flag. | Missed | Passed |
The instructions your model reads when the skill loads.
Detect exposed credentials, API keys, and sensitive data in the codebase.
/secret-scan [path] [--git-history] [--fix]
Scans the codebase (and optionally git history) for exposed secrets: AWS credentials, API keys, private keys, database connection strings, JWT tokens, and other sensitive data. Reports findings with exact file locations and remediation steps.
AKIA[0-9A-Z]{16}[a-zA-Z0-9]{32,} in assignment context-----BEGIN (RSA|EC|DSA) PRIVATE KEY-----postgres://, mongodb://, redis:// with credentialseyJ[A-Za-z0-9-_]+\.eyJ[A-Za-z0-9-_]+\.[A-Za-z0-9-_]+--git-history) -- check previous commits for secrets that were later removed.--fix) -- add entries to .gitignore, suggest secret rotation.# Scan current codebase
/secret-scan
# Include git history
/secret-scan --git-history
# Scan and auto-fix .gitignore
/secret-scan --fix
# Scan specific directory
/secret-scan config/
test cases passed, vs 11 / 23 without
Published skills whose descriptions closely match this one, with their headline benchmark lift.
More skills from the same source and nearby in the registry, with their headline benchmark lift.