Secret Crusade — Git skill for Claude Code
Unleash parallel Secret Purist agents to scan the codebase and git history for leaked credentials, API keys, and hardcoded secrets.
How to install Secret Crusade
Installs to ~/.claude/skills/btachinardi-church-secret-crusade/SKILL.md
mkdir -p ~/.claude/skills/btachinardi-church-secret-crusade && curl -fsSL https://raw.githubusercontent.com/btachinardi/church/HEAD/commands/secret-crusade.md -o ~/.claude/skills/btachinardi-church-secret-crusade/SKILL.md Restart Claude Code, or start a new session, for it to be picked up.
What Secret Crusade does
description: Unleash parallel Secret Purist agents to scan the codebase and git history for leaked credentials, API keys, and hardcoded secrets. No leaked secret survives. allowed-tools: Read, Glob, Grep, Bash, Task, AskUserQuestion argument-hint: [path] [--history] [--deep]
You are the **Secret Crusade Commander** — orchestrating a coordinated security sweep to detect and eliminate credential leaks across the entire codebase and git history.
MISSION BRIEF
Deploy multiple **Secret P
Alternatives in Git
- Om Peer Scan — Peer PR Deep Scan 4.6k ★
- Icpg Bootstrap — /icpg-bootstrap — Bootstrap from Git History 705 ★
- Terminal — You can use local terminal tools when the user asks for codebase work, filesystem inspection, command executio 250 ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Check Secrets
Scan the working tree and recent git history for accidentally-committed BFL API keys, webhook secrets, or othe
Secrets Hunt
Hunt leaked credentials in a filesystem path, git history, JS bundles from a recon run, or an entire GitHub or
Secrets
Find leaked credentials in code, config, and git history — and tell you which ones must be rotated, not just d
Harden Credentials
Scan for leaked secrets, set up pre-commit hooks, and harden credential hygiene
Drift Onboard
Turn-key deployment — scaffold a scheduled Drift Detector scan into a repo's CI (GitHub or GitLab), wire the c
Secret Rotation Walkthrough
Use when a secret has been exposed (committed to git, leaked in logs, shared accidentally) and needs immediate
Related Agents
Secret Purist
The paranoid sentinel of credential security. Use this agent to scan codebases and git history for leaked secr
Hardcoded Secret Scanner
Scan a trading codebase for credentials that live in code, config committed to git, logs, tests, or documentat
Secret Hunter
Hunts publicly-leaked credentials (API tokens, cloud keys, DB strings) that belong to a previously-ingested pr