Scan codebase for exposed secrets, API keys, passwords, and sensitive credentials
6 on GitHubby Jeremy Longshorev1.0.0MITupdated 2 months ago
Not in a marketplace yet, so it loads for one session with --plugin-dir.
Plugin secret-scanner in jar-reis/athenaeum. Commands read from the repo's manifest — 1 month ago.
What it installs
Skills (1)
Scanning for Secrets
This skill helps you scan your codebase for exposed secrets and credentials. It uses pattern matching and entropy analysis to identify potential security vulnerabilities such as API keys, passwords, and private keys. Use this skill when you want to proactively identify and remediate exposed secrets
Slash commands (1)
/secret-scanner:scan-secrets
Scan for exposed secrets and credentials in codebase
Engineering lifecycle skills forked from Matt Pocock's framework: SDLC scaffolding (setup-matt-pocock-skills), test-driven development (tdd), plan-to-issues decomposition (to-issues), context-to-PRD (to-prd), issue triage state machine (triage), disciplined diagnosis (diagnose), architecture deepening (improve-codebase-architecture), and zoom-out perspective (zoom-out). Run setup-matt-pocock-skills first to configure your repo before using the others.
Complete operations kit for FairDB PostgreSQL as a Service - VPS setup, PostgreSQL management, customer provisioning, monitoring, and backup automation
Security review for Claude-generated code. Pattern-based warnings on edits, LLM-powered diff review on Stop, and an agentic commit reviewer that catches injection, XSS, SSRF, hardcoded secrets, and 25+ other vulnerability classes.
AgentDB (external: maintained in ruvnet/agentdb, pinned to commit 27678c3, plugin 3.6.0): agentdb's own standalone MCP server pinned to [email protected] (vector memory with get/list/update/delete for records, patterns and skills, hybrid keyword + vector episode search and an opt-in local cross-encoder, an opt-in aidefence injection guard on memory writes, reflexion, skills, outcome feedback, capabilities report), a memory-specialist agent, 3 skills, /agentdb-status, and the agentdb mod guard that keeps secrets out of memory and refuses delete/reset unless allowed. Complements ruflo-agentdb, which reaches AgentDB through ruflo's server
Duende development skills and agents for Claude Code — covering OAuth/OIDC protocols, IdentityServer, token management, ASP.NET Core authentication/authorization, BFF patterns, and secure identity architecture
SAST analysis, dependency vulnerability scanning, OWASP Top 10 compliance, container security scanning, and automated security hardening
5 skills · 3 commands · 2 agents
wshobson/agents 42,461
Maintain secret-scanner?
This page updates itself from your repo. Add the badge to your README, or get it Featured to pin it above the organic results with a followed link to your site.