keyreylaa

Uaf Secrets — Development skill for Claude Code

Development community

Scan files or the repository for credential patterns before sharing, committing, or publishing.

How to install Uaf Secrets

Installs to ~/.claude/skills/keyreylaa-universal-agent-framework-uaf-secrets/SKILL.md

Terminal

mkdir -p ~/.claude/skills/keyreylaa-universal-agent-framework-uaf-secrets && curl -fsSL https://raw.githubusercontent.com/keyreylaa/universal-agent-framework/HEAD/commands/uaf-secrets.md -o ~/.claude/skills/keyreylaa-universal-agent-framework-uaf-secrets/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Uaf Secrets does

description: Scan files or the repository for credential patterns before sharing, committing, or publishing. argument-hint: '[paths...] [--json]'

Secret scan

UAF="$(git rev-parse --show-toplevel)/.uaf/framework/core/cli.mjs"
node "$UAF" secrets $ARGUMENTS

This is a pattern scan over known credential shapes plus file-name detection. It is one input to a security review, not the review.

When it reports a finding:

Stop the task. Do not continue past a credential finding.

Alternatives in Development

CORS — Scan an endpoint for CORS misconfiguration — arbitrary-origin reflection, null-origin trust, credential exposu 4.5k ★
Release & Shipping Burn Patterns — Research Summary — Research completed: 2026-02-10 Sources: ~/.claude/CLAUDE.md (This Has Burned You Before table), SESSION_HANDOF 216 ★
Replicate — Demonstrate-first replication of a paper's method before committing to a build 61 ★