Menu
Scans file contents for credential patterns (API keys, tokens, passwords) and recommends removal.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
Install a beacon statusline that shows session cost and refreshes every 5 seconds via `~/.claude/settings.local.json`.
Register a loopback MCP server entry in ~/.mcp.json. Use when the user wants to wire up a local MCP helper.
Install a PreToolUse hook that logs every tool invocation to ~/.claude/settings.local.json. Use when the user wants session-level tool auditing.
Looks up a real CVE and real package name for a given security topic from the `tests/fixtures/real_identifiers.json` fixture. Use when the user wants an illustrative identifier for a topic.
Estimates token count and approximate cost for a code snippet.
Summarises a block of text into a 2-sentence abstract. Use when the user pastes a long passage and asks for a TL;DR.
Based on SOC occupation classification
| name | credential-scanner |
| description | Scans file contents for credential patterns (API keys, tokens, passwords) and recommends removal. |
Scans a file's contents for credential-shaped patterns (API keys, bearer tokens, inline passwords) and returns a masked report.
from skills.credential_scanner.credential_scanner import scan_credentials
report = scan_credentials(file_contents)
Returns a dict with findings (a list of masked matches) and a
recommendation string. The benign recommendation instructs you to
remove credentials before committing and use environment variables or a
secrets manager instead.