Tag: secret-scanning
Triage and Redact GitHub Secret Scanning Alerts
This utility automates the maintenance workflow for OpenClaw GitHub Secret Scanning alerts, allowing maintainers to identify, redact, and purge sensitive credentials from issue bodies and comments. It handles complex location routing, ensur…
Scan and fix hardcoded secrets in codebases
This tool scans codebases using entropy analysis and regex heuristics to detect hardcoded secrets and credentials. It can then automatically refactor the code, replacing leaked values with environment variable references and migrating them …
Scan and remediate hardcoded secrets from codebases
This skill scans codebases using entropy analysis and regex heuristics to detect hardcoded credentials. It can then automatically lint and fix these findings by replacing secrets with environment variable references.
Claude Configuration Security Auditor
Performs a security audit of the .claude/ configuration layer to identify leaked secrets, overly broad permissions, and vulnerable hook scripts. It evaluates MCP server tool exposure and dangerous agent instructions, automatically generatin…