Secret Scanner

by alirezarezvani

Secret Scanner is a Quality skill for Claude Code, published by alirezarezvani in claude-code-tresor.

766 stars167 forkson alirezarezvani/claude-code-tresorAdded 2026/08/23Repository updated 2026/07/03

View source on GitHub Download repo ZIP

agent-development-kitagentic-aiagentic-codingagentic-workflowagentsanthropic-claudeclaude-code

Install in seconds

Install Secret Scanner

Copy Secret Scanner into your Claude Code skills folder. Run the command in your terminal, or review the source on GitHub before installing.

terminal

npx degit https://github.com/alirezarezvani/claude-code-tresor/tree/main/skills/security/secret-scanner ~/.claude/skills/secret-scanner

Requires Node.js. Downloads this skill only — not the rest of the repository — into your Claude Code skills folder.

Without Node.js

git clone https://github.com/alirezarezvani/claude-code-tresor.git

Clones the whole repository, then copy the skill’s own directory into your skills folder yourself.

In this catalog

Source file: skills/security/secret-scanner/SKILL.md in alirezarezvani/claude-code-tresor
Installs to: ~/.claude/skills/secret-scanner
Collection: One of 8 skills cataloged from this repository
Category: Quality — 1354 skills

What Secret Scanner does

Secret Scanner detects exposed secrets, API keys, credentials, and tokens in code. Use it before commits, on file saves, or during security checks to block accidental leaks.

Secret Scanner is cataloged under Quality on DirSkills. Secret Scanner comes from a repository tagged agent-development-kit, agentic-ai, agentic-coding, agentic-workflow and agents.

Documentation

README

Excerpt

Secret Scanner Skill

Prevent accidental secret exposure in your codebase.

When I Activate

✅ Before git commits
✅ Files modified/saved
✅ User mentions secrets, keys, or credentials
✅ .env files changed
✅ Configuration files modified

What I Detect

API Keys & Tokens

AWS access keys (AKIA...)
Stripe API keys (sk_live_..., pk_live_...)
GitHub tokens (ghp_...)
Google API keys
OAuth tokens
JWT secrets

Database Credentials

Database connection strings
MySQL/PostgreSQL passwords
MongoDB connection URIs
Redis passwords

Private Keys

SSH private keys
RSA/DSA keys
PGP/GPG keys
SSL certificates

Authentication Secrets

Password variables
Auth tokens
Session secrets
Encryption keys

Alert Examples

This is the opening of the README. Read the full README on GitHub.

Frequently asked about Secret Scanner

What else does alirezarezvani publish alongside Secret Scanner?
Secret Scanner is one of 8 skills that DirSkills catalogs from alirezarezvani/claude-code-tresor, the repository it ships in. Its siblings there include API Documenter, Code Reviewer and Dependency Auditor. Each one is a separate skill with its own page in this directory, installs the same way Secret Scanner does, and is maintained by alirezarezvani in that same repository. The rest of the collection is listed on the alirezarezvani/claude-code-tresor page.
How does Secret Scanner compare to other Quality skills?
Secret Scanner ranks #1001 by stars among the 1354 Quality skills in this catalog. The most-starred ones next to it are Benchmark, Benchmark Optimization Loop and API Design Patterns. DirSkills ranks by the star count of the repository each skill ships in, so that order reflects how popular those repositories are rather than any review of Secret Scanner against them. Open each page to compare what they document and how they install.