with one click
brain-redact
Scan brain for leaked secrets, or scrub a regex from git history.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Menu
Scan brain for leaked secrets, or scrub a regex from git history.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Based on SOC occupation classification
Force a capture bypassing the throttle. Runs capture.sh with FORCE_CAPTURE=1.
Weekly compaction. Dedupe duplicate dated headers, archive entries older than 365 days, regenerate graph, verify hash.
Monthly self-improvement. Reads last 30 days of learnings + decisions, drafts ONE proposed brain edit to code/agents/_proposed/.
Regenerate brain/_graph.md from [[entity]] backlinks across brain/*.md.
Compute or verify a SHA-256 integrity hash of the stable brain corpus.
Regenerate brain/index.md catalog of all brain pages and sources.
| name | brain-redact |
| description | Scan brain for leaked secrets, or scrub a regex from git history. |
--scan (default): grep brain/ for secret patterns. Prints matches with file:line. Exit 0 if clean, 1 if matches found.--scrub <regex>: rewrite git history with git filter-branch. Dry-run unless --force-push is also passed. Refuses dirty working tree.Same as code/lib/redact.sh: OpenAI sk-, AWS AKIA, GitHub gh[pousr]_, JWTs, Bearer tokens, password|token|api_key|secret assignments.
redact.sh --scan
redact.sh --scrub 'sk-[A-Za-z0-9]{20,}' # dry run
redact.sh --scrub 'sk-[A-Za-z0-9]{20,}' --force-push # actually rewrite + push
BRAIN_DIR env (default $HOME/brain).