Fqih

Secret Scan — Development skill for Claude Code

Development community

Scan working directory untuk secrets — gitleaks detect mode, custom rules, fail-fast kalau ada leak.

How to install Secret Scan

Installs to ~/.claude/skills/fqih-.mycc-setup-secret-scan/SKILL.md

Terminal

mkdir -p ~/.claude/skills/fqih-.mycc-setup-secret-scan && curl -fsSL https://raw.githubusercontent.com/Fqih/.mycc-setup/HEAD/commands/secret-scan.md -o ~/.claude/skills/fqih-.mycc-setup-secret-scan/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Secret Scan does

description: Scan working directory untuk secrets — gitleaks detect mode, custom rules, fail-fast kalau ada leak.

/secret-scan

Scan working directory (staged + unstaged) untuk secret leak. Fail-fast kalau ditemukan.

Mode 1: Scan staged only (before commit)

# v8 detect tidak punya --staged; pakai --pipe dengan git diff
git diff --cached | ~/.local/bin/gitleaks detect \
  --no-git \
  --pipe \
  --config .gitleaks.toml \
  --redact \
  --exit-code 2 \
  -v

Mode 2:

Alternatives in Development

Agent.Extras.Workdir Structure — File structure of working directory {{folder}} 19k ★
JWT Scan — JWT attack toolkit (offline) — alg:none forgery, RS256→HS256 algorithm confusion, weak-secret crack, static cl 4.5k ★
/token Scan — Fast rug pull detection for meme coins and token contracts 1.7k ★