Scan the codebase for potential secret leaks including API keys, tokens, passwords, hardcoded project IDs, and sensitive identifiers. Use when the user says "check for secrets", "scan for leaks", "security check", or before committing sensitive changes.

Install

mkdir -p .claude/skills/check-secrets && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/3689" && unzip -o skill.zip -d .claude/skills/check-secrets && rm skill.zip

Installs to .claude/skills/check-secrets

Activation

This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.

Scan the codebase for potential secret leaks including API keys, tokens, passwords, hardcoded project IDs, and sensitive identifiers. Use when the user says "check for secrets", "scan for leaks", "security check", or before committing sensitive changes.
253 chars · catalog description✓ has a “when” triggerlonger than Claude Code's old 250-char listing cap (fine on current versions)

About check-secrets

check-secrets is a specialized agent skill created by benchflow-ai that extends AI coding assistants with security-focused capabilities. This skill belongs to the Security category and is designed to help developers work more effectively in this domain. Agent skills provide context, workflows, and specialized knowledge that help AI assistants perform specific tasks more effectively than general-purpose AI alone.

Scan the codebase for potential secret leaks including API keys, tokens, passwords, hardcoded project IDs, and sensitive identifiers. Use when the user says "check for secrets", "scan for leaks", "security check", or before committing sensitive changes.

How to use check-secrets

Once installed, check-secretsbecomes available in your AI coding environment automatically. Your AI assistant will use the skill's instructions and knowledge whenever relevant tasks arise in your workflow. You can install it at the project level (available only in a specific project) or globally (available across all your projects).

Use the install panel on this page to copy a one-line command for your preferred AI client. The skill files are downloaded and placed in the appropriate directory — no additional configuration is required.

Compatible AI clients

check-secrets works with Claude Code, Codex, GitHub Copilot, Antigravity, and other AI coding assistants that support the skills format.

What are agent skills?

Agent skills are reusable instruction sets that give AI coding assistants new capabilities. They provide context, workflows, and domain-specific knowledge — specialized training for your AI assistant that helps it understand frameworks, coding patterns, and development workflows.

Browse more skills in the skills directory or check the leaderboard for the most popular skills.

Compared to similar skills

check-secrets side by side with the closest alternatives in the catalog.

SkillInstallsUpdatedSafetyDifficulty
check-secrets (this skill)18moNo flags—
reverse-engineering-tools736moNo flagsAdvanced
game-hacking-techniques425moNo flagsAdvanced
solidity-security155moNo flagsIntermediate

You might also like

reverse-engineering-tools

gmh5225

Guide for reverse engineering tools and techniques used in game security research. Use this skill when working with debuggers, disassemblers, memory analysis tools, binary analysis, or decompilers for game security research.

73204

game-hacking-techniques

gmh5225

Guide for game hacking techniques and cheat development. Use this skill when researching memory manipulation, code injection, ESP/aimbot development, overlay rendering, or game exploitation methodologies.

42128

solidity-security

wshobson

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

15115

1password

openclaw

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.

2799

senior-security

davila7

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.

3191

ghidra

mitsuhiko

Reverse engineer binaries using Ghidra's headless analyzer. Decompile executables, extract functions, strings, symbols, and analyze call graphs without GUI.

16105

Search skills

Search the agent skills registry