latiotech

Harden Credentials — Git skill for Claude Code

Git community

Scan for leaked secrets, set up pre-commit hooks, and harden credential hygiene.

How to install Harden Credentials

Installs to ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-credentials/SKILL.md

Terminal
mkdir -p ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-credentials && curl -fsSL https://raw.githubusercontent.com/latiotech/secure-supply-chain-skills/HEAD/commands/harden-credentials.md -o ~/.claude/skills/latiotech-secure-supply-chain-skills-harden-credentials/SKILL.md

Restart Claude Code, or start a new session, for it to be picked up.

What Harden Credentials does

description: Scan for leaked secrets, set up pre-commit hooks, and harden credential hygiene allowed-tools: Read, Write, Edit, Glob, Grep, Bash(git:*, gh:*, betterleaks:*, pip:*, npx:*, curl:*, which:*, brew:*, cargo:*) argument-hint: [directory]

Audit and harden credential hygiene across the project. **This command takes action by default** - it scans for leaked secrets, adds protective gitignore rules, sets up pre-commit hooks, and fixes credential anti-patterns. Changes are explained

Alternatives in Git

  • Om Peer Scan — Peer PR Deep Scan 4.6k ★
  • Linting — Run rm -rf .mypy_cache && pre-commit run --all-files and fix the issues 3.1k ★
  • TDD Guard — by Nizar Selander - A hooks-driven system that monitors file operations in real-time and blocks changes that v 1.9k ★

Full documentation available on GitHub

View Source Repository

Related Skills

Secret Crusade — Git skill for Claude Code

Secret Crusade

Unleash parallel Secret Purist agents to scan the codebase and git history for leaked credentials, API keys, a

Git community
Secrets Hunt — Git skill for Claude Code

Secrets Hunt

Hunt leaked credentials in a filesystem path, git history, JS bundles from a recon run, or an entire GitHub or

Git community
Check Secrets — Git skill for Claude Code

Check Secrets

Scan the working tree and recent git history for accidentally-committed BFL API keys, webhook secrets, or othe

Git community
Bob Fix Precommit — Git skill for Claude Code

Bob Fix Precommit

Run pre-commit on a git repo and resolve everything it fires, where safe to auto-fix. Never auto-allowlists se

Git community
Devgod Enforce — Git skill for Claude Code

Devgod Enforce

Set up devgod-scan, RLS gate, CI workflow, pre-commit, and PR template in this repo.

Git community
Husky — Git skill for Claude Code

Husky

by evmts - Sets up and manages Husky Git hooks by configuring pre-commit hooks, establishing commit message st

Git community

Related Agents

Secret Purist — Security agent for Claude Code

Secret Purist

The paranoid sentinel of credential security. Use this agent to scan codebases and git history for leaked secr

Security community
Secret Guard — Development agent for Claude Code

Secret Guard

MUST be used whenever the user asks to scan for secrets, API keys, credentials, or tokens before a commit or i

Development community
Secret Hunter — Development agent for Claude Code

Secret Hunter

Hunts publicly-leaked credentials (API tokens, cloud keys, DB strings) that belong to a previously-ingested pr

Development community