www-zaq-ai

Secret Field Auditor — Data & AI agent for Claude Code

Data & AI community

Audits ZAQ Ecto schemas for sensitive fields (api_key, token, password, secret, credential) that are stored in the database without encryption via Zaq.Types.EncryptedString.

How to install Secret Field Auditor

Installs to ~/.claude/agents/www-zaq-ai-zaq-secret-field-auditor.md

Terminal

mkdir -p ~/.claude/agents && curl -fsSL https://raw.githubusercontent.com/www-zaq-ai/zaq/HEAD/.claude/agents/secret-field-auditor.md -o ~/.claude/agents/www-zaq-ai-zaq-secret-field-auditor.md

Restart Claude Code, or start a new session, for it to be picked up.

What Secret Field Auditor does

name: secret-field-auditor description: Audits ZAQ Ecto schemas for sensitive fields (api_key, token, password, secret, credential) that are stored in the database without encryption via Zaq.Types.EncryptedString. This is distinct from gitleaks — gitleaks catches hardcoded secrets in code, this agent catches sensitive database fields that lack encryption compliance. Use after any schema or migration change. tools: Read, Write, Edit, Glob, Bash

Secret Field Auditor Agent

Purpose

Alternatives in Data & AI

Credential Hunter — Autonomous credential-attack pipeline runner 4.5k ★
Docs Drift Reviewer — Checks whether clickhouse-go documentation matches changes to its ClickHouse API, database/sql API, transports 3.3k ★
Info Disclosure — Information Disclosure specialist (H1 #18, CWE-200/209/215/538/668/798) 812 ★