Heeler Secrets Scan — Development skill for Claude Code
Run Heeler secret scanning for a repository or staged changes.
How to install Heeler Secrets Scan
Installs to ~/.claude/skills/api-evangelist-heeler-heeler-secrets-scan/SKILL.md
mkdir -p ~/.claude/skills/api-evangelist-heeler-heeler-secrets-scan && curl -fsSL https://raw.githubusercontent.com/api-evangelist/heeler/HEAD/skills/heeler-secrets-scan.md -o ~/.claude/skills/api-evangelist-heeler-heeler-secrets-scan/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Heeler Secrets Scan does
name: heeler-secrets-scan description: Run Heeler secret scanning for a repository or staged changes. Use when comitting code or the user asks to detect, validate, or gate on exposed secrets, tokens, credentials, or API keys.
Heeler Secrets Scan
Use this skill for secret-detection workflows with `heelercli`.
When to use
- User asks for secret scanning, credential leak checks, or pre-commit secret gates.
- User wants to reduce false positives with validated-only findings.
- User
Alternatives in Development
- JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
- Sanitize — Detect and redact PII from text files — 15 categories (SSNs, credit cards, API keys, etc.), zero dependencies 3.1k ★
- API — All methods are exposed as MCP tools 1.7k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Secret Scan
Scan working directory untuk secrets — gitleaks detect mode, custom rules, fail-fast kalau ada leak.
Heeler Malicious Package Scan
Detect suspicious or malicious dependencies using Heeler package-risk intelligence. Use when a new dependency
CryptEnv
A local-first encrypted secrets vault for developers. API keys, credentials, commands and links — accessible w
Maskara
Offline CLI for scanning and redacting secrets from coding-agent session logs
Check Actions
Refresh ACTION_REQUIRED.md for a product — scans .env (key-name + emptiness mode by default; no values exposed
Dexscreener Unofficial CLI + MCP + Skills
You are a token scanning specialist using the Dexscreener Unofficial CLI (not affiliated with or endorsed by D
Related Agents
Secret Guard
MUST be used whenever the user asks to scan for secrets, API keys, credentials, or tokens before a commit or i
Secret Purist
The paranoid sentinel of credential security. Use this agent to scan codebases and git history for leaked secr
Secret Hunter
Hunts publicly-leaked credentials (API tokens, cloud keys, DB strings) that belong to a previously-ingested pr