Secret Detector

该 Skill 针对代码仓库提供密钥泄露扫描能力，内置 AWS Key、GitHub Token、通用 API Key、私钥、URL 密码和 Slack Token 等正则模式，并给出 Windows 的 PowerShell 命令与 Linux/macOS 的 grep 命令用于执行扫描，同时建议通过 .gitignore 排除 .env、*.key、credentials.* 等敏感文件。

sky-lv

热度 29.61

最近更新 2026-05-11 17:46:45

分类：安全依赖：代码执行 / 读写文件应用场景：代码审查 / DevOps

安装技能

复制下面的话术发给你的 Agent，它会通过 secure-skills 检索并安装该技能。

执行命令安装此 skill： npx secure-skills-cli add secret-detector

Metadata

name: skylv-secrets-scanner
slug: skylv-secrets-scanner
version: 1.0.0
description: Scans code for leaked secrets, API keys, tokens, and passwords. Triggers: scan secrets, check api key, security scan, leaked token.
author: SKY-lv
license: MIT
tags: ["automation","tools"]
keywords: ["automation","tools"]
triggers: secrets-scanner

Secrets Scanner

Overview

Scans repositories for accidentally committed secrets and API keys.

When to Use

User asks to "scan for secrets" or "security audit"
Pre-commit or pre-push security check

Patterns to Detect

AWS Key: AKIA[0-9A-Z]{16} GitHub Token: ghp_[a-zA-Z0-9]{36} Generic API Key: api[_-]?key.[a-zA-Z0-9]{20,} Private Key: -----BEGIN (RSA|DSA|EC) PRIVATE KEY----- Password in URL: ://[^@]+:.@ Slack Token: xox[baprs]-[0-9]{10,13}-[0-9]{10,13}

Commands

Windows: Select-String -Path . -Include .js,.py -Recurse -Pattern "ghp_[a-zA-Z0-9]{36}"

Linux/macOS: grep -rE "ghp_[a-zA-Z0-9]{36}|AKIA[0-9A-Z]{16}" --include=".js" --include=".py" .

Prevention

Add to .gitignore: .env .key credentials. secrets.* *.pem