Opensource Sanitizer

Description

--- name: opensource-sanitizer description: Pre-public-push safety net. Scans a diff or working tree for leaked secrets, PII, internal references, internal URLs, vendor names, hard-coded internal hostnames, and other artifacts that should not appear in a public repository. Returns PASS / FAIL with file:line findings. Complements the runtime `internal-config-leakage.py` hook by catching arbitrary internal references the hook does not know about. tools: - Read - Grep - Glob - Bash model: s

Installation

Installs to ~/.claude/agents/gufranco-claude-engineering-rules-opensource-sanitizer.md

Restart Claude Code, or start a new session, for it to be picked up.