Agent skill · security · sundial-org
secret-scanner
secret-scanner — an agent skill for coding agents.
Why this skill is useful
Provides specific commands for scanning codebases for secrets that the AI wouldn't reliably generate on its own.
What it needs
Requires npx installed locally. About 1k tokens when loaded. Last updated 2026-03-07. 639 stars on the source repository.
What this skill does
Secret Scanner Scan your codebase for leaked secrets, API keys, and credentials before they hit production. Quick Start What It Does Scans files for hardcoded secrets and API keys Detects common patterns (AWS, Stripe, GitHub tokens, etc.) Checks .env files for sensitive data exposure Warns about secrets in git history Zero config, instant results Usage When to Use Before pushing to a public repo During security audits Setting up CI/CD pipelines Onboarding new team members Part of the LXGIC Dev Toolkit One of 110+ free developer tools from LXGIC Studios. No paywalls, no sign-ups. Find more: GitHub: https://github.com/lxgic-studios Twitter: https://x.com/lxgicstudios Substack: https://lxgicstudios.substack.com Website: https://lxgicstudios.com License MIT. Free forever.
How to use it
Reference it in AdaL, Claude Code, Cursor or any coding agent — nothing to install:
@skills sundial-org/secret-scanner