Detect leaked API keys, tokens, and credentials in your codebase.
Secret Scanner
Find and prevent secret leaks in your code.
Features
- 100+ secret patterns (AWS, GCP, Stripe, GitHub, etc.)
- Entropy-based detection for unknown formats
- Git history scanning
- Pre-commit hook integration
- .gitignore and .env audit
- Remediation suggestions
Usage
claude skill install secret-scanner
Run /scan-secrets to scan your repository.