package-scanner-ci

Security scanning, PII detection, secret masking, and AI hook installation using the shk CLI. Use when the user asks to: scan for secrets/credentials/sensitive data, detect or mask PII, set up security hooks for Claude Code/Cursor/Codex, run security diagnostics (shk doctor), manage dotenvx private keys, push dotenv payloads to AWS/GCP secret managers, or guard content flowing through MCP tools or external data connections.