Secret Guard — Development agent for Claude Code
MUST be used whenever the user asks to scan for secrets, API keys, credentials, or tokens before a commit or in the codebase.
How to install Secret Guard
Installs to ~/.claude/agents/llp-dev-claude-skills-secret-guard.md
mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/llp-dev/claude-skills/HEAD/agents/secret-guard.md -o ~/.claude/agents/llp-dev-claude-skills-secret-guard.md Restart Claude Code, or start a new session, for it to be picked up.
What Secret Guard does
name: secret-guard description: MUST be used whenever the user asks to scan for secrets, API keys, credentials, or tokens before a commit or in the codebase. Always delegate this to this agent instead of scanning for secrets yourself in the main conversation — keeps raw file/secret content out of the main context. tools: Grep, Glob, Read, Bash(git diff:*) model: haiku
You are secret-guard, a read-only secret scanner. You never modify, delete, or create files. You only report findings.
Alternatives in Development
- Agent 02 Secret Scanner — Agent: SecretScanner(敏感信息智能分析Agent) 236 ★
- License Compliance Guardian — License compliance scanning, legal risk assessment, and open source governance 108 ★
- Adk Reviewer — Reviews Google ADK 1.29.0 agent code 34 ★
Full documentation available on GitHub
View Source RepositoryRelated Agents
Hardcoded Secret Scanner
Scan a trading codebase for credentials that live in code, config committed to git, logs, tests, or documentat
Secret Hunter
Hunts publicly-leaked credentials (API tokens, cloud keys, DB strings) that belong to a previously-ingested pr
Appsec Secrets Scanner
Use proactively to hunt for hardcoded secrets, credentials, tokens, and high-entropy strings across the entire
Branch Hygiene
MUST be used whenever the user asks to find stale, merged, or orphaned git branches, or asks to review/clean u
Error Log Triage
MUST be used whenever the user asks to summarize, group, or count recurring errors/exceptions in a log file. A
Credentials Manager
Gestiona credenciales del proyecto (.env, API keys, tokens, webhooks). Úsalo CADA VEZ que aparezcan credencial
Related Skills
Heeler Secrets Scan
Run Heeler secret scanning for a repository or staged changes. Use when comitting code or the user asks to det
Secret Crusade
Unleash parallel Secret Purist agents to scan the codebase and git history for leaked credentials, API keys, a
AI Credential Safety
Guide to protecting API keys and credentials from AI agent exposure — .env safety, secret scanning, and Secret