SE

secrets-gitleaks

Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks. Identifies passwords, API keys, tokens, and credentials through regex-based pattern matching and entropy analysis. Use when: (1) Scanning repositories for exposed secrets and credentials, (2) Implementing pre-commit hooks to prevent secret leakage, (3) Integrating secret detection into CI/CD pipelines, (4) Auditing codebases for compliance violations (PCI-DSS, SOC2, GDPR), (5) Establishing baseline secret detection and tracking new exposures, (6) Remediating historical secret exposures in git history.

Install

mkdir -p .claude/skills/secrets-gitleaks && curl -L -o skill.zip "https://agentskills.codes/api/skills/download/1403" && unzip -o skill.zip -d .claude/skills/secrets-gitleaks && rm skill.zip

Installs to .claude/skills/secrets-gitleaks

Activation

This is the description your AI agent reads to decide when to run this skill — the better it matches your request, the more reliably it fires.

Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks. Identifies passwords, API keys, tokens, and credentials through regex-based pattern matching and entropy analysis. Use when: (1) Scanning repositories for exposed secrets and credentials, (2) Implementing pre-commit hooks to prevent secret leakage, (3) Integrating secret detection into CI/CD pipelines, (4) Auditing codebases for compliance violations (PCI-DSS, SOC2, GDPR), (5) Establishing baseline secret detection and tracking new exposures, (6) Remediating historical secret exposures in git history.
598 chars · catalog description✓ has a “when” triggerlonger than Claude Code's old 250-char listing cap (fine on current versions)

About secrets-gitleaks

secrets-gitleaks is a specialized agent skill created by benchflow-ai that extends AI coding assistants with security-focused capabilities. This skill belongs to the Security category and is designed to help developers work more effectively in this domain. Agent skills provide context, workflows, and specialized knowledge that help AI assistants perform specific tasks more effectively than general-purpose AI alone.

Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks. Identifies passwords, API keys, tokens, and credentials through regex-based pattern matching and entropy analysis. Use when: (1) Scanning repositories for exposed secrets and credentials, (2) Implementing pre-commit hooks to prevent secret leakage, (3) Integrating secret detection into CI/CD pipelines, (4) Auditing codebases for compliance violations (PCI-DSS, SOC2, GDPR), (5) Establishing baseline secret detection and tracking new exposures, (6) Remediating historical secret exposures in git history.

How to use secrets-gitleaks

Once installed, secrets-gitleaksbecomes available in your AI coding environment automatically. Your AI assistant will use the skill's instructions and knowledge whenever relevant tasks arise in your workflow. You can install it at the project level (available only in a specific project) or globally (available across all your projects).

Use the install panel on this page to copy a one-line command for your preferred AI client. The skill files are downloaded and placed in the appropriate directory — no additional configuration is required.

Compatible AI clients

secrets-gitleaks works with Claude Code, Codex, GitHub Copilot, Antigravity, and other AI coding assistants that support the skills format.

What are agent skills?

Agent skills are reusable instruction sets that give AI coding assistants new capabilities. They provide context, workflows, and domain-specific knowledge — specialized training for your AI assistant that helps it understand frameworks, coding patterns, and development workflows.

Browse more skills in the skills directory or check the leaderboard for the most popular skills.

Compared to similar skills

secrets-gitleaks side by side with the closest alternatives in the catalog.

SkillInstallsUpdatedSafetyDifficulty
secrets-gitleaks (this skill)48moNo flags—
reverse-engineering-tools736moNo flagsAdvanced
game-hacking-techniques425moNo flagsAdvanced
solidity-security155moNo flagsIntermediate

You might also like

reverse-engineering-tools

gmh5225

Guide for reverse engineering tools and techniques used in game security research. Use this skill when working with debuggers, disassemblers, memory analysis tools, binary analysis, or decompilers for game security research.

73204

game-hacking-techniques

gmh5225

Guide for game hacking techniques and cheat development. Use this skill when researching memory manipulation, code injection, ESP/aimbot development, overlay rendering, or game exploitation methodologies.

42128

solidity-security

wshobson

Master smart contract security best practices to prevent common vulnerabilities and implement secure Solidity patterns. Use when writing smart contracts, auditing existing contracts, or implementing security measures for blockchain applications.

15115

1password

openclaw

Set up and use 1Password CLI (op). Use when installing the CLI, enabling desktop app integration, signing in (single or multi-account), or reading/injecting/running secrets via op.

2799

senior-security

davila7

Comprehensive security engineering skill for application security, penetration testing, security architecture, and compliance auditing. Includes security assessment tools, threat modeling, crypto implementation, and security automation. Use when designing security architecture, conducting penetration tests, implementing cryptography, or performing security audits.

3191

ghidra

mitsuhiko

Reverse engineer binaries using Ghidra's headless analyzer. Decompile executables, extract functions, strings, symbols, and analyze call graphs without GUI.

16105

Search skills

Search the agent skills registry