Secret Scanner
- 58 installs
- 2.6k repo stars
- Updated August 5, 2026
- jeremylongshore/claude-code-plugins-plus-skills
Scans a codebase for hardcoded secrets, API keys, and credentials that should not be committed.
About
Detects hardcoded secrets and credentials in code. A developer uses it when auditing a repo for leaked keys before pushing.
- Auto-activates on secret scanner requests
- Part of the Security Fundamentals category
Secret Scanner by the numbers
- 58 all-time installs (skills.sh)
- Ranked #1,236 of 2,203 Security skills by installs in the Skillselion catalog
- Data as of Aug 5, 2026 (Skillselion catalog sync)
npx skills add https://github.com/jeremylongshore/claude-code-plugins-plus-skills --skill secret-scannerAdd your badge
Show developers this skill is listed on Skillselion. Paste this into your README.
| Installs | 58 |
|---|---|
| repo stars | ★ 2.6k |
| Last updated | August 5, 2026 |
| Repository | jeremylongshore/claude-code-plugins-plus-skills ↗ |
What it does
Scans a codebase for hardcoded secrets, API keys, and credentials that should not be committed.
Files
Secret Scanner
Overview
This skill provides automated assistance for secret scanner tasks within the Security Fundamentals domain.
When to Use
This skill activates automatically when you:
- Mention "secret scanner" in your request
- Ask about secret scanner patterns or best practices
- Need help with essential security skills covering authentication, input validation, secure coding practices, and basic vulnerability detection.
Instructions
1. Provides step-by-step guidance for secret scanner 2. Follows industry best practices and patterns 3. Generates production-ready code and configurations 4. Validates outputs against common standards
Examples
Example: Basic Usage Request: "Help me with secret scanner" Result: Provides step-by-step guidance and generates appropriate configurations
Prerequisites
- Relevant development environment configured
- Access to necessary tools and services
- Basic understanding of security fundamentals concepts
Output
- Generated configurations and code
- Best practice recommendations
- Validation results
Error Handling
| Error | Cause | Solution |
|---|---|---|
| Configuration invalid | Missing required fields | Check documentation for required parameters |
| Tool not found | Dependency not installed | Install required tools per prerequisites |
| Permission denied | Insufficient access | Verify credentials and permissions |
Resources
- Official documentation for related tools
- Best practices guides
- Community examples and tutorials
Related Skills
Part of the Security Fundamentals skill category. Tags: security, authentication, validation, owasp, secure-coding
Related skills
Entra App RegistrationCorrectly register an application in Microsoft Entra ID, configure OAuth 2.0 flows, request the right API permissions, and generate working MSAL authentication snippets484k1.3kAzure ComplianceRun automated Azure compliance scans, security posture checks, and Key Vault expiration audits before deploying.484k1.3k
Openclaw Secure Linux CloudDeploy and harden an OpenClaw agent instance on a Linux cloud server following battle-tested security defaults.270k72
Better Auth Best PracticesCorrectly configure Better Auth for secure authentication with database adapters, sessions, OAuth, email/password, and plugins in TypeScript projects.80.9k206
Firebase Security Rules AuditorAutomatically audit Firebase Firestore security rules for bypass vulnerabilities and logic gaps before deploying.80.4k397
Audit WebsiteRun comprehensive audits that surface SEO, performance, security, technical, and content issues with LLM-optimized reports and health scores.65.6k85