원클릭으로 Manus에서 모든 스킬 실행

시작하기

secret-scanner

스타511

포크42

업데이트2026년 4월 13일 21:43

Pre-push API key and credential scanner - blocks git push if secrets found

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

vibeeval

vibeeval/vibecosystem

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

Secret Scanner

Scans your codebase for leaked API keys, tokens, and credentials. Blocks git push if secrets are found.

Usage

# Scan current directory
vibeco secrets

# Scan specific path
vibeco secrets /path/to/project

Detected Secrets (22 patterns)

Provider	Pattern	Example
OpenAI	`sk-proj-...`, `sk-...`	`sk-proj-abc123...`
Anthropic	`sk-ant-...`	`sk-ant-api03-...`
AWS	`AKIA...`	`AKIAIOSFODNN7EXAMPLE`
GitHub	`ghp_...`, `gho_...`, `github_pat_...`	`ghp_xxxxxxxxxxxx`
Stripe	`sk_live_...`, `pk_live_...`	`sk_live_4eC39H...`
Google	`AIza...`	`AIzaSyDaGm...`
Slack	`xoxb-...`, `xoxp-...`	`xoxb-123-456-abc`
SendGrid	`SG....`	`SG.xxx.yyy`
npm	`npm_...`	`npm_xxxxxxxxxxxxx`
PyPI	`pypi-...`	`pypi-AgEIcHl...`
Database URLs	`postgres://`, `mongodb://`, `mysql://`, `redis://`	With embedded passwords
Private Keys	`PRIVATE KEY-----`	PEM format

Auto-Setup: Git Pre-Push Hook

Add to your project's .git/hooks/pre-push:

#!/bin/bash
vibeco secrets "$(git rev-parse --show-toplevel)" || exit 1

Make it executable:

chmod +x .git/hooks/pre-push

Now every git push will scan for secrets first. If any are found, push is blocked.

How It Works

Walks all source files (skips node_modules, dist, .git, lock files)
Matches 22 regex patterns for known API key formats
Skips comments and regex definition lines (avoids false positives)
If secrets found: prints masked values, exits with code 1 (blocks push)
If clean: prints success, exits with code 0

What to Do If Secrets Are Found

Remove the secret from source code
Move to .env file (add .env to .gitignore)
Use environment variables: process.env.API_KEY
If already pushed: rotate the credential immediately (it's compromised)

Scanned File Types

.ts .tsx .js .jsx .mjs .cjs .py .go .java .rb .php .rs .swift .kt .json .yml .yaml .toml .env .cfg .conf .ini .sh .bash .zsh .xml .properties .gradle

이 저장소의 다른 Skills

같은 저장소

codex-orchestration

vibeeval/vibecosystem

OpenAI Codex CLI + Claude Code (Hizir) birlikte kullanim rehberi. Is dagitim pattern'leri, GitHub Actions workflow ornekleri, review dongusu ve iki AI yazilim asistaninin guclu yanlarini birlestiren orchestration stratejileri.

2026-06-10511

create-handoff

vibeeval/vibecosystem

Create handoff document for transferring work to another session

2026-06-10511

experiment-engine

vibeeval/vibecosystem

Otonom deney dongusu. Kod degisikligi yap, olc, karsilastir, kabul et veya geri al. Metrik bazli karar verme ile performans, boyut veya kalite optimizasyonu. Tek basina veya agent ile kullan.

2026-06-10511

plan-agent

vibeeval/vibecosystem

Planning agent that creates implementation plans and handoffs from conversation context

2026-06-10511

tdd-workflow

vibeeval/vibecosystem

Use this skill when writing new features, fixing bugs, or refactoring code. Enforces test-driven development with 80%+ coverage including unit, integration, and E2E tests.

2026-06-10511

system-overview

vibeeval/vibecosystem

Show how vibecosystem works - agents, skills, hooks, and self-learning pipeline.

2026-04-13511

name	secret-scanner
description	Pre-push API key and credential scanner - blocks git push if secrets found
version	1.0.0
category	security
tags	["secrets","api-keys","pre-push","git-hooks","security"]

Secret Scanner

Scans your codebase for leaked API keys, tokens, and credentials. Blocks git push if secrets are found.

Usage

# Scan current directory
vibeco secrets

# Scan specific path
vibeco secrets /path/to/project

Detected Secrets (22 patterns)

Provider	Pattern	Example
OpenAI	`sk-proj-...`, `sk-...`	`sk-proj-abc123...`
Anthropic	`sk-ant-...`	`sk-ant-api03-...`
AWS	`AKIA...`	`AKIAIOSFODNN7EXAMPLE`
GitHub	`ghp_...`, `gho_...`, `github_pat_...`	`ghp_xxxxxxxxxxxx`
Stripe	`sk_live_...`, `pk_live_...`	`sk_live_4eC39H...`
Google	`AIza...`	`AIzaSyDaGm...`
Slack	`xoxb-...`, `xoxp-...`	`xoxb-123-456-abc`
SendGrid	`SG....`	`SG.xxx.yyy`
npm	`npm_...`	`npm_xxxxxxxxxxxxx`
PyPI	`pypi-...`	`pypi-AgEIcHl...`
Database URLs	`postgres://`, `mongodb://`, `mysql://`, `redis://`	With embedded passwords
Private Keys	`PRIVATE KEY-----`	PEM format

Auto-Setup: Git Pre-Push Hook

Add to your project's .git/hooks/pre-push:

#!/bin/bash
vibeco secrets "$(git rev-parse --show-toplevel)" || exit 1

Make it executable:

chmod +x .git/hooks/pre-push

Now every git push will scan for secrets first. If any are found, push is blocked.

How It Works

Walks all source files (skips node_modules, dist, .git, lock files)
Matches 22 regex patterns for known API key formats
Skips comments and regex definition lines (avoids false positives)
If secrets found: prints masked values, exits with code 1 (blocks push)
If clean: prints success, exits with code 0

What to Do If Secrets Are Found

Remove the secret from source code
Move to .env file (add .env to .gitignore)
Use environment variables: process.env.API_KEY
If already pushed: rotate the credential immediately (it's compromised)

Scanned File Types

.ts .tsx .js .jsx .mjs .cjs .py .go .java .rb .php .rs .swift .kt .json .yml .yaml .toml .env .cfg .conf .ini .sh .bash .zsh .xml .properties .gradle