Check Secrets

Description

--- description: Scan the working tree and recent git history for accidentally-committed BFL API keys, webhook secrets, or other credentials. disable-model-invocation: true allowed-tools: Read, Grep, Glob, Bash(rg:*), Bash(grep:*), Bash(git log:*), Bash(git show:*) --- # `/check-secrets` — scan for committed credentials Catches the most common leakage paths for this project. ## Workflow 1. **Working tree scan**: - `config.ini` — confirm `X_KEY = your-key` (the placeholder). Anything else

Installation

Installs to ~/.claude/commands/gelasdev-comfyui-flux-bfl-api-check-secrets.md

Restart Claude Code, or start a new session, for it to be picked up.