Execute qualquer Skill no Manus
com um clique

Execute qualquer Skill no Manus com um clique

Começar

secret-scanner

Estrelas511

Forks42

Atualizado13 de abril de 2026 às 21:43

Pre-push API key and credential scanner - blocks git push if secrets found

Instalação

Instalar com Codex ou Claude Copie este prompt, cole no Codex, Claude ou outro assistente e deixe que ele revise a página da skill e instale para você.

Executar no Manus

Fonte

vibeeval

vibeeval/vibecosystem

Abrir repositório GitHub Ver repositórios do creator

Download

Executar no Manus

Ocupações relacionadasSOC

Baseado na classificação ocupacional SOC

Analistas de segurança da informaçãoInformática e Matemática·SOC 15-1212

SKILL.md

readonly

name	secret-scanner
description	Pre-push API key and credential scanner - blocks git push if secrets found
version	1.0.0
category	security
tags	["secrets","api-keys","pre-push","git-hooks","security"]

Secret Scanner

Scans your codebase for leaked API keys, tokens, and credentials. Blocks git push if secrets are found.

Usage

# Scan current directory
vibeco secrets

# Scan specific path
vibeco secrets /path/to/project

Detected Secrets (22 patterns)

Provider	Pattern	Example
OpenAI	`sk-proj-...`, `sk-...`	`sk-proj-abc123...`
Anthropic	`sk-ant-...`	`sk-ant-api03-...`
AWS	`AKIA...`	`AKIAIOSFODNN7EXAMPLE`
GitHub	`ghp_...`, `gho_...`, `github_pat_...`	`ghp_xxxxxxxxxxxx`
Stripe	`sk_live_...`, `pk_live_...`	`sk_live_4eC39H...`
Google	`AIza...`	`AIzaSyDaGm...`
Slack	`xoxb-...`, `xoxp-...`	`xoxb-123-456-abc`
SendGrid	`SG....`	`SG.xxx.yyy`
npm	`npm_...`	`npm_xxxxxxxxxxxxx`
PyPI	`pypi-...`	`pypi-AgEIcHl...`
Database URLs	`postgres://`, `mongodb://`, `mysql://`, `redis://`	With embedded passwords
Private Keys	`PRIVATE KEY-----`	PEM format

Auto-Setup: Git Pre-Push Hook

Add to your project's .git/hooks/pre-push:

#!/bin/bash
vibeco secrets "$(git rev-parse --show-toplevel)" || exit 1

Make it executable:

chmod +x .git/hooks/pre-push

Now every git push will scan for secrets first. If any are found, push is blocked.

How It Works

Walks all source files (skips node_modules, dist, .git, lock files)
Matches 22 regex patterns for known API key formats
Skips comments and regex definition lines (avoids false positives)
If secrets found: prints masked values, exits with code 1 (blocks push)
If clean: prints success, exits with code 0

What to Do If Secrets Are Found

Remove the secret from source code
Move to .env file (add .env to .gitignore)
Use environment variables: process.env.API_KEY
If already pushed: rotate the credential immediately (it's compromised)

Scanned File Types

.ts .tsx .js .jsx .mjs .cjs .py .go .java .rb .php .rs .swift .kt .json .yml .yaml .toml .env .cfg .conf .ini .sh .bash .zsh .xml .properties .gradle

Mais deste repositório

mesmo repositório

codex-orchestration

vibeeval/vibecosystem

OpenAI Codex CLI + Claude Code (Hizir) birlikte kullanim rehberi. Is dagitim pattern'leri, GitHub Actions workflow ornekleri, review dongusu ve iki AI yazilim asistaninin guclu yanlarini birlestiren orchestration stratejileri.

2026-06-10511

create-handoff

vibeeval/vibecosystem

Create handoff document for transferring work to another session

2026-06-10511

experiment-engine

vibeeval/vibecosystem

Otonom deney dongusu. Kod degisikligi yap, olc, karsilastir, kabul et veya geri al. Metrik bazli karar verme ile performans, boyut veya kalite optimizasyonu. Tek basina veya agent ile kullan.

2026-06-10511

plan-agent

vibeeval/vibecosystem

Planning agent that creates implementation plans and handoffs from conversation context

2026-06-10511

tdd-workflow

vibeeval/vibecosystem

Use this skill when writing new features, fixing bugs, or refactoring code. Enforces test-driven development with 80%+ coverage including unit, integration, and E2E tests.

2026-06-10511

system-overview

vibeeval/vibecosystem

Show how vibecosystem works - agents, skills, hooks, and self-learning pipeline.

2026-04-13511

name	secret-scanner
description	Pre-push API key and credential scanner - blocks git push if secrets found
version	1.0.0
category	security
tags	["secrets","api-keys","pre-push","git-hooks","security"]

Secret Scanner

Scans your codebase for leaked API keys, tokens, and credentials. Blocks git push if secrets are found.

Usage

# Scan current directory
vibeco secrets

# Scan specific path
vibeco secrets /path/to/project

Detected Secrets (22 patterns)

Provider	Pattern	Example
OpenAI	`sk-proj-...`, `sk-...`	`sk-proj-abc123...`
Anthropic	`sk-ant-...`	`sk-ant-api03-...`
AWS	`AKIA...`	`AKIAIOSFODNN7EXAMPLE`
GitHub	`ghp_...`, `gho_...`, `github_pat_...`	`ghp_xxxxxxxxxxxx`
Stripe	`sk_live_...`, `pk_live_...`	`sk_live_4eC39H...`
Google	`AIza...`	`AIzaSyDaGm...`
Slack	`xoxb-...`, `xoxp-...`	`xoxb-123-456-abc`
SendGrid	`SG....`	`SG.xxx.yyy`
npm	`npm_...`	`npm_xxxxxxxxxxxxx`
PyPI	`pypi-...`	`pypi-AgEIcHl...`
Database URLs	`postgres://`, `mongodb://`, `mysql://`, `redis://`	With embedded passwords
Private Keys	`PRIVATE KEY-----`	PEM format

Auto-Setup: Git Pre-Push Hook

Add to your project's .git/hooks/pre-push:

#!/bin/bash
vibeco secrets "$(git rev-parse --show-toplevel)" || exit 1

Make it executable:

chmod +x .git/hooks/pre-push

Now every git push will scan for secrets first. If any are found, push is blocked.

How It Works

Walks all source files (skips node_modules, dist, .git, lock files)
Matches 22 regex patterns for known API key formats
Skips comments and regex definition lines (avoids false positives)
If secrets found: prints masked values, exits with code 1 (blocks push)
If clean: prints success, exits with code 0

What to Do If Secrets Are Found

Remove the secret from source code
Move to .env file (add .env to .gitignore)
Use environment variables: process.env.API_KEY
If already pushed: rotate the credential immediately (it's compromised)

Scanned File Types

.ts .tsx .js .jsx .mjs .cjs .py .go .java .rb .php .rs .swift .kt .json .yml .yaml .toml .env .cfg .conf .ini .sh .bash .zsh .xml .properties .gradle