Secrets Hunt — Git skill for Claude Code
Hunt leaked credentials in a filesystem path, git history, JS bundles from a recon run, or an entire GitHub org.
How to install Secrets Hunt
Installs to ~/.claude/commands/m1rr0r199501-agent-pentest-framework-secrets-hunt.md
mkdir -p ~/.claude/commands && curl -fsSL https://raw.githubusercontent.com/m1rr0r199501/agent-pentest-framework/HEAD/.claude/commands/secrets-hunt.md -o ~/.claude/commands/m1rr0r199501-agent-pentest-framework-secrets-hunt.md Restart Claude Code, or start a new session, for it to be picked up.
What Secrets Hunt does
description: Hunt leaked credentials in a filesystem path, git history, JS bundles from a recon run, or an entire GitHub org. Wraps trufflehog (verifies live keys against issuer APIs), noseyparker (fast on huge histories), and gitleaks (default rule pack). Falls back to a regex grep if no scanner is installed. Usage: /secrets-hunt --filesystem | --git | --js-bundle | --github-org
/secrets-hunt
Find leaked API keys, tokens, and credentials — verified whe
Alternatives in Git
- Openclaude — Open Claude Is Open-source coding-agent CLI for OpenAI, Gemini, DeepSeek, Ollama, Codex, GitHub Models, and 20 22.5k ★
- Superclaude — by SuperClaude-Org - A versatile configuration framework that enhances Claude Code with specialized commands 21.7k ★
- Intel — On-demand intelligence fetch for a target — CVEs, disclosed reports, new features 3.8k ★
Full documentation available on GitHub
View Source RepositoryRelated Skills
Secret Crusade
Unleash parallel Secret Purist agents to scan the codebase and git history for leaked credentials, API keys, a
Check Secrets
Scan the working tree and recent git history for accidentally-committed BFL API keys, webhook secrets, or othe
Harden Credentials
Scan for leaked secrets, set up pre-commit hooks, and harden credential hygiene
Check CI
Token-free PR merge-gate watcher — one process loops inside gh pr checks --watch --fail-fast, then verifies ze
Briefd
Your agents, briefed. Not flooded. Self-hosted context compiler: git-backed team knowledge served to coding ag
Hunt Endpoints
Hunt publicly-exposed sensitive endpoints and files for an ingested program (/.env, /config., /.git/HEAD, /swa
Related Agents
Secret Hunter
Hunts publicly-leaked credentials (API tokens, cloud keys, DB strings) that belong to a previously-ingested pr
Secret Purist
The paranoid sentinel of credential security. Use this agent to scan codebases and git history for leaked secr
No Tools Reviewer
A cold reader with NO filesystem access. Answers ONLY from the text in its prompt and physically cannot read f