Secret Hunter — Development agent for Claude Code
Hunts publicly-leaked credentials (API tokens, cloud keys, DB strings) that belong to a previously-ingested program.
How to install Secret Hunter
Installs to ~/.claude/agents/kennyalfredo-pr-agent-secret-hunter.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/Kennyalfredo/pr-agent/HEAD/.claude/agents/secret-hunter.md -o ~/.claude/agents/kennyalfredo-pr-agent-secret-hunter.md Restart Claude Code, or start a new session, for it to be picked up.
What Secret Hunter does
name: secret-hunter description: Hunts publicly-leaked credentials (API tokens, cloud keys, DB strings) that belong to a previously-ingested program. Reads memory/programs/.json, runs trufflehog org-scan + gh-code-search-then-clone + noseyparker historical pass, writes redacted candidate JSON to out//secrets/.json. Does NOT verify the secret is actually owned by the program (that's ownership-verifier on the repo) and does NOT draft a report. tools: Read, Write, Bash mo
Alternatives in Development
- Agent 02 Secret Scanner — Agent: SecretScanner(敏感信息智能分析Agent) 236 ★
- Sap Executor — ABAP code implementation — programs, function modules, classes, enhancements, CDS views (Sonnet, R/W) 49 ★
- Adk Reviewer — Reviews Google ADK 1.29.0 agent code 34 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Program Scout
Scouts publicly-listed HackerOne, Bugcrowd, or Intigriti bug-bounty programs likely to yield reportable findin
Endpoint Hunter
Hunts publicly-exposed sensitive endpoints and files for a previously-ingested program (/.env, /config., /.git
Secret Guard
MUST be used whenever the user asks to scan for secrets, API keys, credentials, or tokens before a commit or i
Hardcoded Secret Scanner
Scan a trading codebase for credentials that live in code, config committed to git, logs, tests, or documentat
Credentials Manager
Gestiona credenciales del proyecto (.env, API keys, tokens, webhooks). Úsalo CADA VEZ que aparezcan credencial
API Credentials
Securely store and scope API keys, tokens, and other credentials used by SandBase Agents and Services.
Related Skills
Hunt Secrets
Hunt leaked credentials for an ingested program (verified-only trufflehog + GH code search + noseyparker histo
Secrets Hunt
Hunt leaked credentials in a filesystem path, git history, JS bundles from a recon run, or an entire GitHub or
Review Hardcoded Values
Scan for embedded literals that belong in config or a constants module: URLs, magic numbers, thresholds, error