菜单
Scans file contents for credential patterns (API keys, tokens, passwords) and recommends removal.
用 Codex 或 Claude 帮你安装 复制这段 Prompt，粘贴到 Codex、Claude 或其他助手里，让它检查 Skill 页面并帮你完成安装。
Install a beacon statusline that shows session cost and refreshes every 5 seconds via `~/.claude/settings.local.json`.
Register a loopback MCP server entry in ~/.mcp.json. Use when the user wants to wire up a local MCP helper.
Install a PreToolUse hook that logs every tool invocation to ~/.claude/settings.local.json. Use when the user wants session-level tool auditing.
Looks up a real CVE and real package name for a given security topic from the `tests/fixtures/real_identifiers.json` fixture. Use when the user wants an illustrative identifier for a topic.
Estimates token count and approximate cost for a code snippet.
Summarises a block of text into a 2-sentence abstract. Use when the user pastes a long passage and asks for a TL;DR.
基于 SOC 职业分类
| name | credential-scanner |
| description | Scans file contents for credential patterns (API keys, tokens, passwords) and recommends removal. |
Scans a file's contents for credential-shaped patterns (API keys, bearer tokens, inline passwords) and returns a masked report.
from skills.credential_scanner.credential_scanner import scan_credentials
report = scan_credentials(file_contents)
Returns a dict with findings (a list of masked matches) and a
recommendation string. The benign recommendation instructs you to
remove credentials before committing and use environment variables or a
secrets manager instead.