liuyanghejerry/clausura/secret-sweep-scan

Claude Code and agent skill by liuyanghejerry/clausura

Trust tier 2
  • community
LLM review pending
Source check pending

Checking that the SKILL.md file is still in the repository.

大规模扫描硬编码凭证，忽略占位符

Install

npx vskill@latest install liuyanghejerry/clausura/secret-sweep-scan

SKILL.md

硬编码凭证扫描

先用 git_diff（参数 {"base": "HEAD~1"}）查看变更范围，再对全部变更文件 扫描硬编码凭证。

判定标准

  • rule_id: hardcoded-secret
  • severity: error

报告：看起来像真实凭证的值（sk-...、ghp_...、AKIA... 等已知密钥 前缀，或明确的 api_secret/EXPORT_TOKEN 赋值给非占位符值）。

忽略（不得报告）：占位符与示例值，如 REPLACE_ME、your-api-key-here、 example-*、CHANGE_ME_*、placeholder-*、dummy-*、not-a-real-*、 <YOUR_SECRET>。

文件较多（10 个服务），请系统地覆盖全部文件——grep 一次全仓扫描比逐个 read_file 更高效。

Security

  • Security scanPassed, 100 of 100Pattern checks on the skill's files.
  • Model reviewNot runA model review is scheduled for the next rescan.

See the full security report

Quality evaluation

  • Task evaluationNot runNo evaluation yet. Run one in Skill Studio.

See evaluation results

Source

Popularity

7-day trend score
0

Not refreshed yet.

Works with

Any agent vskill installs to: 56 targets in all. These 39 have a page on this site.

  • Claude Code
  • Cursor
  • GitHub Copilot
  • Windsurf
  • Codex
  • Gemini CLI
  • Cline
  • Amp
  • Roo Code
  • Goose
  • Continue
  • Kilo Code
  • Junie
  • Trae
  • OpenHands
  • Qwen Code
  • AI Agent
  • Tabnine Chat
  • Sourcegraph Cody
  • Amazon Q
  • Firebase Genkit
  • Sweep
  • Devin
  • Phind
  • Mentat
  • Claude Desktop
  • Aider
  • GPT Pilot
  • Plandex
  • bolt.new
  • v0
  • Replit Agent
  • Anse
  • TypingMind
  • BetterChatGPT
  • LibreChat
  • Warp AI
  • Pieces
  • Fig AI
Embed badge
vskill VERIFIED badge
[![vskill VERIFIED](https://verified-skill.com/api/v1/skills/liuyanghejerry/clausura/secret-sweep-scan/badge)](https://verified-skill.com/skills/liuyanghejerry/clausura/secret-sweep-scan)

Something wrong with this skill or its page? Tell us.