Agent skill · security · sundial-org
ggshield-scanner
Detect 500+ types of hardcoded secrets (API keys, credentials, tokens) before they leak into git. Wraps GitGuardian's ggshield CLI.
Why this skill is useful
Adds executable commands for scanning codebases and Docker images for hardcoded secrets, significantly enhancing security capabilities.
What it needs
Requires ggshield, python installed locally. Requires gitguardian account access. About 4k tokens when loaded. Last updated 2026-03-07. 639 stars on the source repository.
What this skill does
ggshield Secret Scanner Overview ggshield is a CLI tool that detects hardcoded secrets in your codebase. This Moltbot skill brings secret scanning capabilities to your AI agent. What Are "Secrets"? Secrets are sensitive credentials that should NEVER be committed to version control: AWS Access Keys, GCP Service Accounts, Azure credentials API tokens (GitHub, Slack, Stripe, etc.) Database passwords and connection strings Private encryption keys and certificates OAuth tokens and refresh tokens PayPal/Stripe API keys Email server credentials Why This Matters A single leaked secret can: 🔓 Compromise your infrastructure 💸 Incur massive cloud bills (attackers abuse your AWS account) 📊 Expose customer data (GDPR/CCPA violation) 🚨 Trigger security incidents and audits ggshield catches these before they reach your repository. Features Commands Available 1. scan-repo Scans an entire git repository for secrets (including history). Output: Output on detection: 2. scan-file Scans a single file for secrets. 3. scan-staged Scans only staged git changes (useful pre-commit check). This runs on your git add-ed changes only (fast!). 4. install-hooks Installs ggshield as a git pre-commit hook. After this, every commit is automatically scanned: 5. scan-docker Scans Docker images for secrets in their layers. Installation Prerequisites 1. ggshield CLI: Install via pip 2. GitGuardian API Key: Required for secret detection Sign up: https://dashboard.gitguardian.com (free) Generate API key in Settings Set environment variable: 3. Python 3.8+: Required by ggshield Install Skill The skill is now available in your Moltbot workspace. …
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sundial-org/ggshield-scanner