api-evangelist

Heeler Secrets Scan — Development skill for Claude Code

Development community

Run Heeler secret scanning for a repository or staged changes.

How to install Heeler Secrets Scan

Installs to ~/.claude/skills/api-evangelist-heeler-heeler-secrets-scan/SKILL.md

Terminal
mkdir -p ~/.claude/skills/api-evangelist-heeler-heeler-secrets-scan && curl -fsSL https://raw.githubusercontent.com/api-evangelist/heeler/HEAD/skills/heeler-secrets-scan.md -o ~/.claude/skills/api-evangelist-heeler-heeler-secrets-scan/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Heeler Secrets Scan does


name: heeler-secrets-scan description: Run Heeler secret scanning for a repository or staged changes. Use when comitting code or the user asks to detect, validate, or gate on exposed secrets, tokens, credentials, or API keys.

Heeler Secrets Scan

Use this skill for secret-detection workflows with `heelercli`.

When to use

  • User asks for secret scanning, credential leak checks, or pre-commit secret gates.
  • User wants to reduce false positives with validated-only findings.
  • User

Alternatives in Development

  • JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
  • Sanitize — Detect and redact PII from text files — 15 categories (SSNs, credit cards, API keys, etc.), zero dependencies 3.1k ★
  • API — All methods are exposed as MCP tools 1.7k ★

Full documentation available on GitHub

View Source Repository