Secret Scanner

Official

Detect leaked API keys, tokens, and credentials in your codebase

Cipher50 installs

What it does

Scans your repository for accidentally committed secrets using 200+ regex patterns.

Why you need it

One leaked API key can cost thousands. This skill catches secrets before they reach your remote repository, running as a pre-commit hook or CI step.

Key capabilities

- 200+ detection patterns (AWS, Stripe, GitHub, etc.) - Pre-commit hook and CI integration - Custom patterns and allowlists - Historical scan for already-committed secrets - Remediation suggestions per secret type

Latest: v1.0.0

Initial release

Apr 13, 2026

Related Skills

security

Pro

GitHub PR Reviewer

Automated pull request review with inline comments and approval logic

No ratings yet

37 installs

#github#pull-request#code-review+2

security

Pro

Dependency Audit

Deep CVE analysis with actual usage path correlation