Menu
Scans the codebase for accidentally committed secrets, tokens, and credentials
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Analyzes the current session's token usage, pinpoints where tokens were wasted, and produces concrete optimization actions
Generates API documentation from route definitions (Express, Fastify, Hono, etc.)
Adds caching to expensive operations - Redis, in-memory, HTTP cache headers
Staged değişiklikleri analiz edip Conventional Commits formatında commit mesajı oluşturur
Reports cyclomatic complexity hotspots and refactoring suggestions
Finds unused functions, variables, exports, and dependencies across the codebase
| name | secret-scan |
| description | Scans the codebase for accidentally committed secrets, tokens, and credentials |
| user-invocable | true |
| allowed-tools | Bash Grep Read |
| effort | low |
# Common secret patterns
grep -rn \
-e "password\s*=\s*['\"][^'\"]\+" \
-e "secret\s*=\s*['\"][^'\"]\+" \
-e "api_key\s*=\s*['\"][^'\"]\+" \
-e "token\s*=\s*['\"][^'\"]\+" \
-e "sk-[a-zA-Z0-9]\{20,\}" \
-e "ghp_[a-zA-Z0-9]\{36\}" \
-e "AKIA[0-9A-Z]\{16\}" \
-e "-----BEGIN.*PRIVATE KEY-----" \
--include="*.ts" --include="*.js" --include="*.env*" --include="*.json" \
--exclude-dir=node_modules --exclude-dir=dist \
. 2>/dev/null | grep -v "\.test\." | grep -v "example\|placeholder\|your_key_here"
Also check:
git log --all --full-history -- "*.env" | head -10
git log --diff-filter=D --summary | grep ".env" | head -10
For each finding:
Note: Rotate first, remove from history second - a removed commit is not the same as a revoked token.