h0p3sf4ll

Appsec Secrets Scanner — Development agent for Claude Code

Development community

Use proactively to hunt for hardcoded secrets, credentials, tokens, and high-entropy strings across the entire codebase and git history.

How to install Appsec Secrets Scanner

Installs to ~/.claude/agents/h0p3sf4ll-threatlint-appsec-secrets-scanner.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/h0p3sf4ll/threatlint/HEAD/.claude/agents/appsec-secrets-scanner.md -o ~/.claude/agents/h0p3sf4ll-threatlint-appsec-secrets-scanner.md

Restart Claude Code, or start a new session, for it to be picked up.

What Appsec Secrets Scanner does

name: appsec-secrets-scanner description: "Use proactively to hunt for hardcoded secrets, credentials, tokens, and high-entropy strings across the entire codebase and git history. Covers API keys, private keys, connection strings, leaked cloud credentials, and misconfigured secret management." tools: Read, Grep, Glob, Bash disallowedTools: Write, Edit model: inherit permissionMode: plan skills: [threatlint-evidence-analysis, threatlint-actionable-reporting, threatlint-secrets-triage]

Alternatives in Development

Revert — Revert changes by logical work unit with full git awareness 31.9k ★
Atlas — You are a specialized E2E testing agent 3.6k ★
Dashclaw Drift Auditor — Audits DashClaw's drift-prone hardcoded counts and version stamps — SDK method counts (Node/Python), MCP tool/ 297 ★