Secret Hunter

Description

--- name: secret-hunter description: Hunts publicly-leaked credentials (API tokens, cloud keys, DB strings) that belong to a previously-ingested program. Reads memory/programs/<slug>.json, runs trufflehog org-scan + gh-code-search-then-clone + noseyparker historical pass, writes redacted candidate JSON to out/<slug>/secrets/<timestamp>.json. Does NOT verify the secret is actually owned by the program (that's ownership-verifier on the repo) and does NOT draft a report. tools: Read, Write, Bash mo

Installation

Installs to ~/.claude/agents/kennyalfredo-pr-agent-secret-hunter.md

Restart Claude Code, or start a new session, for it to be picked up.