compound-key-leak-skill

Étoiles0

Forks0

Mis à jour22 mai 2026 à 21:33

A skill with compound credential keys like SECRET_KEY and CLIENT_SECRET that must be matched by the generic-credential detector.

Installation

Installer avec Codex ou Claude Copiez ce prompt, collez-le dans Codex, Claude ou un autre assistant, puis laissez-le vérifier la page du skill et l'installer pour vous.

Exécuter dans Manus

Source

dhanesh

dhanesh/repo2skill

Ouvrir le dépôt GitHub Voir les dépôts du créateur

Téléchargement

Exécuter dans Manus

Métiers associésSOC

Basé sur la classification professionnelle SOC

Analystes en assurance qualité des logiciels et testeursProfessions informatiques et mathématiques·SOC 15-1253

SKILL.md

readonly

name	compound-key-leak-skill
description	A skill with compound credential keys like SECRET_KEY and CLIENT_SECRET that must be matched by the generic-credential detector.
version	1.0.0

compound-key-leak-skill

Compound credential key names (an optional identifier suffix between the keyword and the separator) must be matched, not just bare PASSWORD=/SECRET=/TOKEN=.

Configuration

SECRET_KEY=PLACEHOLDER_REPLACED_AT_RUNTIME
CLIENT_SECRET=PLACEHOLDER_REPLACED_AT_RUNTIME
PRIVATE_KEY=PLACEHOLDER_REPLACED_AT_RUNTIME
DB_PASSWORD=PLACEHOLDER_REPLACED_AT_RUNTIME

Plus depuis ce dépôt

même dépôt

repo2skill

dhanesh/repo2skill

Extracts a reusable code pattern from the current repo and authors a portable, validated Agent Skill. Use when you want to capture a logging setup, CI/CD pipeline, observability stack, async messaging pattern, frontend component library, feature-flag middleware, or any other repeatable engineering pattern so it can be replayed across other repos. Produces: a standard-conformant SKILL.md, parameterized code templates in assets/templates/, a PARAMETERS.md documenting every placeholder, then runs validate-skill.sh, scan-leaks.sh, and dry-run-replay.sh as a tiered quality gate. Output is ready to publish via references/publishing.md.

2026-05-220

placeholder-in-desc

dhanesh/repo2skill

Regression fixture for dry-run-replay header-skip drift.

2026-05-220

fp-asset-sha-skill

dhanesh/repo2skill

A clean skill containing a git commit SHA, a UUID, and an embedded base64 image asset — none of which are secrets and none must trip the scanner.

2026-05-220

sample-logging

dhanesh/repo2skill

Sets up structured logging for a service using a configurable log level and service name. Produces a logger.config file ready for ingestion by your logging pipeline. Works with any service that reads configuration from a flat config file.

2026-05-220

aws-leak-skill

dhanesh/repo2skill

A skill that accidentally contains an AWS access key — should be caught by the scanner.

2026-05-220

b64-padding-leak-skill

dhanesh/repo2skill

A skill containing bare base64 secrets ending in equals-sign padding, which must not evade the entropy detector.

2026-05-220

Exécutez n'importe quel Skill en un clic