latiotech

Audit Credentials — Security skill for Claude Code

Security community

Find long-lived tokens, hardcoded secrets, and credentials that should be rotated or replaced.

How to install Audit Credentials

Installs to ~/.claude/skills/latiotech-secure-supply-chain-skills-audit-credentials/SKILL.md

Terminal

mkdir -p ~/.claude/skills/latiotech-secure-supply-chain-skills-audit-credentials && curl -fsSL https://raw.githubusercontent.com/latiotech/secure-supply-chain-skills/HEAD/commands/audit-credentials.md -o ~/.claude/skills/latiotech-secure-supply-chain-skills-audit-credentials/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Audit Credentials does

description: Find long-lived tokens, hardcoded secrets, and credentials that should be rotated or replaced allowed-tools: Read, Write, Edit, Glob, Grep, Bash(git:, gh:, aws:, gcloud:, az:*)

Scan the entire project for long-lived credentials, hardcoded secrets, and tokens that should be rotated or replaced with short-lived alternatives. **This command takes action by default** - it flags every finding with severity, location, and the specific fix. Where safe to do so (e.g., adding `.

Alternatives in Security

Maestro Odyssey — Long-running iterative cycle — one entry, seven modes (debug improve planex review security defensive ui) 530 ★
Engage.Cvediff — Find the canonical fix commit(s) for a CVE across sources, then diff for root cause 348 ★
Cross-Pollinate Hex MCP Servers — Diff-driven audit: find real transferable changes across hex-line-mcp, hex-ssh-mcp, hex-graph-mcp 238 ★