gelasdev

Check Secrets — Git skill for Claude Code

Git community

Scan the working tree and recent git history for accidentally-committed BFL API keys, webhook secrets, or other credentials.

How to install Check Secrets

Installs to ~/.claude/commands/gelasdev-comfyui-flux-bfl-api-check-secrets.md

Terminal
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/gelasdev/ComfyUI-FLUX-BFL-API/HEAD/.claude/commands/check-secrets.md -o ~/.claude/commands/gelasdev-comfyui-flux-bfl-api-check-secrets.md

Restart Claude Code, or start a new session, for it to be picked up.

What Check Secrets does

description: Scan the working tree and recent git history for accidentally-committed BFL API keys, webhook secrets, or other credentials. disable-model-invocation: true allowed-tools: Read, Grep, Glob, Bash(rg:*), Bash(grep:*), Bash(git log:*), Bash(git show:*)

`/check-secrets` — scan for committed credentials

Catches the most common leakage paths for this project.

Workflow

  1. Working tree scan:
    • config.ini — confirm X_KEY = your-key (the placeholder). Anything else

Alternatives in Git

  • Om Peer Scan — Peer PR Deep Scan 4.6k ★
  • Copilot API — Turns GitHub Copilot into an OpenAI/Anthropic API compatible server, usable with Claude Code 3.1k ★
  • Mychanges — Summarize my recent git commits in standup format 1.6k ★

Full documentation available on GitHub

View Source Repository

Related Skills

Secret Crusade — Git skill for Claude Code

Secret Crusade

Unleash parallel Secret Purist agents to scan the codebase and git history for leaked credentials, API keys, a

Git community
Secrets Hunt — Git skill for Claude Code

Secrets Hunt

Hunt leaked credentials in a filesystem path, git history, JS bundles from a recon run, or an entire GitHub or

Git community
Harden Credentials — Git skill for Claude Code

Harden Credentials

Scan for leaked secrets, set up pre-commit hooks, and harden credential hygiene

Git community
Secret Rotation Walkthrough — Git skill for Claude Code

Secret Rotation Walkthrough

Use when a secret has been exposed (committed to git, leaked in logs, shared accidentally) and needs immediate

Git community
Claude With Webhook — Git skill for Claude Code

Claude With Webhook

Self-hosted GitHub webhook server that automates Claude Code planning & implementation from issues, integratin

Git community
Google Drive – Memyard — Git skill for Claude Code

Google Drive – Memyard

git clone https://github.com/zagmoai/public-google-drive ~/.claude/skills/public-google-drive Create and edit

Git community

Related Agents

Hardcoded Secret Scanner — Development agent for Claude Code

Hardcoded Secret Scanner

Scan a trading codebase for credentials that live in code, config committed to git, logs, tests, or documentat

Development community
Secret Purist — Security agent for Claude Code

Secret Purist

The paranoid sentinel of credential security. Use this agent to scan codebases and git history for leaked secr

Security community
ForensicAgent — Security agent for Claude Code

ForensicAgent

Forensic security analyst — PII detection, secret scanning, identity leak auditing across git history, staged

Security community