安装命令
npx skills add https://github.com/jorgealves/agent_skills --skill secret-leak-detector🇨🇳中文介绍
秘密泄露检测器
目的与意图
secret-leak-detector 旨在通过识别硬编码的敏感信息（如 API 密钥、数据库凭证和身份验证令牌）来保护代码仓库，防止它们在提交前或意外推送到历史记录后被泄露。
使用时机
- 提交前检查：在提交更改前运行此技能，以确保没有引入任何秘密信息。
- CI/CD 流水线：集成到自动化流水线中，以阻止包含明文秘密的构建。
- 历史记录审计：结合
scan_history: true使用，对项目的整个历史记录进行深度审计，以查找已删除但仍存在于 git 日志中的秘密。
不适用场景
- 生产环境日志：此工具适用于源代码和配置文件；不适用于扫描数 TB 的运行时日志。
- 二进制文件：无法有效检测已编译二进制文件或加密数据块中的秘密。
输入输出示例
输入
directory_path: "./config"
scan_history: false
输出
{
"leaks": [
{
"file": "config/production.yaml",
"line": 45,
"type": "Stripe Secret Key",
"risk_level": "critical",
"snippet": "sk_live_**********"
}
]
}
🇺🇸English
Secret Leak Detector
Purpose and Intent
The secret-leak-detector is designed to safeguard repositories by identifying hardcoded sensitive information such as API keys, database credentials, and authentication tokens before they are committed or after they have been accidentally pushed to history.
When to Use
- Pre-commit Checks : Run this skill before committing changes to ensure no secrets are being introduced.
- CI/CD Pipelines : Integrate into automated pipelines to block builds that contain plain-text secrets.
- Legacy Audits : Use with
scan_history: trueto perform a deep audit of a project's entire history to find secrets that were deleted but still exist in git logs.
When NOT to Use
- Production Logs : This tool is for source code and config files; it is not optimized for scanning terabytes of runtime logs.
- Binary Files : It will not effectively detect secrets inside compiled binaries or encrypted blobs.
Input and Output Examples
Input
directory_path: "./config"
scan_history: false
Output
广告位招租
在这里展示您的产品或服务
触达数万 AI 开发者，精准高效
