real-credential-leak

Estrelas0

Forks0

Atualizado22 de maio de 2026 às 21:33

A skill that accidentally bundles a real credential assignment. Use as a regression fixture to confirm the prose guard does not over-suppress real secrets.

Instalação

Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.

Executar no Manus

Fonte

dhanesh

dhanesh/repo2skill

Abrir repositório GitHub Ver repositórios do creator

Download

Executar no Manus

Ocupações relacionadasSOC

Baseado na classificação ocupacional SOC

Analistas de garantia de qualidade de software e testadoresInformática e Matemática·SOC 15-1253

SKILL.md

readonly

name	real-credential-leak
description	A skill that accidentally bundles a real credential assignment. Use as a regression fixture to confirm the prose guard does not over-suppress real secrets.

real-credential-leak

This fixture plants a genuine credential value. The generic-credential detector must still flag it: the value carries mixed case and digits, so it is not a plain dictionary word and the documentation-prose guard does not apply.

password="PLACEHOLDER_REPLACED_AT_RUNTIME"

Mais deste repositório

mesmo repositório

repo2skill

dhanesh/repo2skill

Extracts a reusable code pattern from the current repo and authors a portable, validated Agent Skill. Use when you want to capture a logging setup, CI/CD pipeline, observability stack, async messaging pattern, frontend component library, feature-flag middleware, or any other repeatable engineering pattern so it can be replayed across other repos. Produces: a standard-conformant SKILL.md, parameterized code templates in assets/templates/, a PARAMETERS.md documenting every placeholder, then runs validate-skill.sh, scan-leaks.sh, and dry-run-replay.sh as a tiered quality gate. Output is ready to publish via references/publishing.md.

2026-05-220

placeholder-in-desc

dhanesh/repo2skill

Regression fixture for dry-run-replay header-skip drift.

2026-05-220

fp-asset-sha-skill

dhanesh/repo2skill

A clean skill containing a git commit SHA, a UUID, and an embedded base64 image asset — none of which are secrets and none must trip the scanner.

2026-05-220

sample-logging

dhanesh/repo2skill

Sets up structured logging for a service using a configurable log level and service name. Produces a logger.config file ready for ingestion by your logging pipeline. Works with any service that reads configuration from a flat config file.

2026-05-220

aws-leak-skill

dhanesh/repo2skill

A skill that accidentally contains an AWS access key — should be caught by the scanner.

2026-05-220

b64-padding-leak-skill

dhanesh/repo2skill

A skill containing bare base64 secrets ending in equals-sign padding, which must not evade the entropy detector.

2026-05-220

Execute qualquer Skill com um clique