bagel

name	bagel
description	Use this skill when the user wants to scan their workstation for security risks, find leaked credentials, or scrub sensitive data from CLI session logs.

bagel Plugin

Inventory security-relevant metadata on developer workstations — no payloads, ever.

Commands

Scan

• bagel scan run — Scan workstation for security findings

Scrub

• bagel scrub run — Remove credentials from AI CLI session logs

Usage Examples

• "Scan workstation for security issues"
• "Scrub credentials from shell history"
• "Check for risky Git configurations"

Installation

brew install boostsecurityio/tap/bagel

Linux:

curl -sL https://github.com/boostsecurityio/bagel/releases/latest/download/bagel_Linux_x86_64.tar.gz | tar xz
sudo mv bagel /usr/local/bin/

Examples

# Scan workstation
bagel scan

# Table output
bagel scan -f table

# Save to file
bagel scan -o report.json

# CI gate - fail if findings exist
bagel scan --strict

# Scrub credentials
bagel scrub --yes

# Dry run scrub
bagel scrub --dry-run

Key Features

• No payloads - metadata only
• 9 security probes (Git, SSH, npm, env, cloud, etc.)
• 8 secret detectors
• Read-only operations
• JSON or table output
• Scrub command for session logs