Axguard Secrets — Development skill for Claude Code
Hunt hard-coded secrets, keys, tokens, PEM material.
How to install Axguard Secrets
Installs to ~/.claude/skills/awarexone-axguard-axguard-secrets/SKILL.md
mkdir -p ~/.claude/skills/awarexone-axguard-axguard-secrets && curl -fsSL https://raw.githubusercontent.com/Awarexone/AXguard/HEAD/commands/axguard-secrets.md -o ~/.claude/skills/awarexone-axguard-axguard-secrets/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Axguard Secrets does
description: Hunt hard-coded secrets, keys, tokens, PEM material. Usage: /axguard-secrets [path]
/axguard-secrets
**Specialist:** Secrets Hunter
Usage
/axguard-secrets
/axguard-secrets ./
Steps
- Run focused scan (filter secrets rules from full audit or grep leads):
axguard scan --format json -o .findings/axguard/secrets.json
- Keep findings whose id starts with
secrets. - For each hit: confirm it is live material (not a fixture/example), t
Alternatives in Development
- Tare — Diagnose Claude Code usage — where tokens went and why 256 ★
- Agenfk Calc Tokens — Calculate and log token usage for the current session 64 ★
- AgentLimits — AgentLimits is macOS widgets that display Codex/Claude Code usage limits and ccusage tokens, cost, heatmap 56 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Axguard Crypto
Crypto footguns — hard-coded keys/IVs, MD5 passwords, Math.random tokens, TLS verify off. Usage: /axguard-cryp
Axguard Auth
AuthZ / IDOR / JWT / CSRF footgun hunt. Usage: /axguard-auth [path]
Heeler Secrets Scan
Run Heeler secret scanning for a repository or staged changes. Use when comitting code or the user asks to det
Axguard Ssrf
SSRF and unsafe egress — user-influenced fetch/requests, metadata IPs. Usage: /axguard-ssrf [path]
Secrets Bootstrap
Work with encrypted secrets, env files, and signing material safely.
Hunt Secrets
Hunt leaked credentials for an ingested program (verified-only trufflehog + GH code search + noseyparker histo
Related Agents
Appsec Secrets Scanner
Use proactively to hunt for hardcoded secrets, credentials, tokens, and high-entropy strings across the entire
Opensource Sanitizer
Pre-public-push safety net. Scans a diff or working tree for leaked secrets, PII, internal references, interna
Secret Scanner
PYA specialist spawned by the /pya orchestrator. Finds hardcoded and leaked credentials in an untrusted reposi