Menu
Escanea el historial git o los commits pendientes de push buscando secrets con gitleaks. SE-239/SE-247.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
| name | git-secret-scanner |
| description | Escanea el historial git o los commits pendientes de push buscando secrets con gitleaks. SE-239/SE-247. |
| summary | Escaneo de secrets en historial git con gitleaks. Clasificación CRITICAL/HIGH/MEDIUM/LOW. Output: JSONL + summary MD en output/security/. |
| maturity | stable |
| context | fork |
| context_cost | low |
| category | security |
| tags | ["security","gitleaks","secret","git-history","pre-push"] |
| trigger | {"type":"keyword","keywords":["escanea el historial","busca secrets","git secret scan","secret scanning","scan history","gitleaks"]} |
| se | SE-239 |
Detecta secrets en el historial git o en commits pendientes de push.
bash scripts/git-history-secret-scan.sh
bash scripts/git-history-secret-scan.sh --since HEAD~50
bash scripts/git-history-secret-scan.sh --since 2026-01-01
bash scripts/git-history-secret-scan.sh --since v1.0.0
bash scripts/install-prepush-hook.sh
| Fichero | Contenido |
|---|---|
output/security/history-scan-YYYYMMDD.jsonl | Findings completos (git-ignorado) |
output/security/history-scan-YYYYMMDD-summary.md | Resumen legible |
output/security/pre-push-findings.jsonl | Findings del hook pre-push |
Todos en output/security/ — git-ignorado (N3, confidencial).
| Code | Significado |
|---|---|
| 0 | Sin findings — repo limpio |
| 1 | Findings CRITICAL o HIGH |
| 2 | Solo findings MEDIUM o LOW |
| Nivel | Qué incluye |
|---|---|
| CRITICAL | AWS keys, GCP tokens, GitHub PAT, private keys |
| HIGH | Contraseñas, certificados, credentials genéricos |
| MEDIUM | URIs con credenciales embebidas |
| LOW | Posibles falsos positivos, entropy alta sin regex match |
bash scripts/git-history-secret-remediate.sh --commit <hash> --file <path>
El script genera los comandos git-filter-repo o BFG — no los ejecuta.
El humano revisa y ejecuta con coordinación del equipo.
El script detecta automáticamente si gitleaks está disponible y muestra instrucciones de instalación + alternativa Docker:
docker run --rm -v "$(pwd):/path" zricethezav/gitleaks:latest detect --source /path
Editar .gitleaks.toml en la raíz para excluir falsos positivos:
diff_hash=, signature=)Guide for creating high-quality MCP (Model Context Protocol) servers that enable LLMs to interact with external services through well-designed tools. Use when building MCP servers to integrate external APIs or services, whether in Python (FastMCP) or Node/TypeScript (MCP SDK).
Create new skills, modify and improve existing skills, and measure skill performance. Use when users want to create a skill from scratch, edit, or optimize an existing skill, run evals to test a skill, benchmark skill performance with variance analysis, or optimize a skill's description for better triggering accuracy.
Detecta el Bus Factor por modulo en un repositorio git usando el algoritmo CST(change-size-ratio). Genera JSON con BF, owners, riesgo, y avisa cuando un solo dev conoce un modulo critico.
Genera CONTEXT_DOME.md para modulos con Bus Factor bajo. Captura conocimiento tacito: proposito, decisiones no obvias, dependencias, runbook minimo, knowledge owners y plan de distribucion.
Usar cuando se quiere ejecutar tareas de bajo riesgo de forma autónoma durante la noche.
Mapear la superficie de ataque de un dominio: subdominios, OSINT, typosquatting.