Menu
Scans the codebase for accidentally committed secrets, tokens, and credentials
Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.
Baseado na classificação ocupacional SOC
Analyzes the current session's token usage, pinpoints where tokens were wasted, and produces concrete optimization actions
Generates API documentation from route definitions (Express, Fastify, Hono, etc.)
Adds caching to expensive operations - Redis, in-memory, HTTP cache headers
Staged değişiklikleri analiz edip Conventional Commits formatında commit mesajı oluşturur
Reports cyclomatic complexity hotspots and refactoring suggestions
Finds unused functions, variables, exports, and dependencies across the codebase
| name | secret-scan |
| description | Scans the codebase for accidentally committed secrets, tokens, and credentials |
| user-invocable | true |
| allowed-tools | Bash Grep Read |
| effort | low |
# Common secret patterns
grep -rn \
-e "password\s*=\s*['\"][^'\"]\+" \
-e "secret\s*=\s*['\"][^'\"]\+" \
-e "api_key\s*=\s*['\"][^'\"]\+" \
-e "token\s*=\s*['\"][^'\"]\+" \
-e "sk-[a-zA-Z0-9]\{20,\}" \
-e "ghp_[a-zA-Z0-9]\{36\}" \
-e "AKIA[0-9A-Z]\{16\}" \
-e "-----BEGIN.*PRIVATE KEY-----" \
--include="*.ts" --include="*.js" --include="*.env*" --include="*.json" \
--exclude-dir=node_modules --exclude-dir=dist \
. 2>/dev/null | grep -v "\.test\." | grep -v "example\|placeholder\|your_key_here"
Also check:
git log --all --full-history -- "*.env" | head -10
git log --diff-filter=D --summary | grep ".env" | head -10
For each finding:
Note: Rotate first, remove from history second - a removed commit is not the same as a revoked token.