48 tagged secrets, measured the same way as everything else here.
Browse within: owasp 12devscops 9npm 9audit 6credentials 6vault 5
Skill Claude CodeCodex
Manage your security baseline — accept current findings as known debt, then only report new regressions on future scans. Use when the user wants to adopt security scanning incrementally or suppress existing findings.
Skill Claude CodeCodex
Run Ship Safe in CI mode — compact output, exit codes, SARIF generation. Use when the user wants to set up CI/CD security gates or test their pipeline configuration.
Skill Claude CodeCodex
Run a full security audit on this project — 16 agents scan for secrets, injections, auth bypass, SSRF, supply chain, Supabase RLS, MCP security, agentic AI, RAG poisoning, PII compliance, and more. Use when the user wants a security audit, vulnerability scan, or asks if their code is safe to ship.
Skill Claude CodeCodex
Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks. Identifies passwords, API keys, tokens, and credentials through regex-based pattern matching and entropy analysis. Use when: (1) Scanning repositories for exposed secrets and credentials, (2) Implementing pre-commit hooks to…
Skill Claude CodeCodex
Zero-knowledge secrets infrastructure — AI agents manage the complete credential lifecycle without ever seeing values.
Skill Claude CodeCodex
How releases and Docker image tags work for ghcr.io/gitguardian/mcp-server. Triggers when releasing a new version, changing release.yml, building an image from a branch, or answering "which tag should I deploy / what does latest point to".
Skill Claude CodeCodex
Read env vars through ggapicore.settings.getsettings(), not os.environ. Triggers when adding a new env-driven config or reviewing code that calls os.environ / os.getenv.
Skill Claude CodeCodex
Pre-launch codebase audit skill. Use this whenever someone is about to ship, deploy, launch, push to main/prod, or merge a release - even without "goshipit" explicitly. Trigger on: "is my app ready?", "can I deploy now?", "pre-deploy check", "review before launch", "is this production-ready?", "check my codebase"…
Skill Claude CodeCodex
Use when a command needs API keys or environment secrets. Inject only named variables through envskill without reading or printing values.
Skill Claude CodeCodex
Use when a command needs API keys or environment secrets. Inject only named variables through envskill without reading or printing values.
Skill Claude CodeCodex
Fill stored secrets (passwords, card numbers, API keys) into web pages through the secure-browser MCP server without ever seeing the secret values. Use when a task needs a login, checkout, payment form, or any credential entered into a website and the credentials live in a secret store rather than in the conversation.
Skill Claude CodeCodex
Share secrets securely using zKettle — a zero-knowledge, self-destructing secret sharing tool. Create, read, revoke, generate, and audit secrets via MCP tools. Secrets are encrypted client-side with AES-256-GCM; the server never sees plaintext. Use for credential sharing, API key rotation, temporary access grants, and…
Skill Claude CodeCodex
Securely save, retrieve, or reference API keys, SSH keys, server credentials, and domain info via the keys CLI using workflows that avoid returning plaintext in normal tool output. Use when the user mentions saving, getting, injecting, or referencing secrets, API keys, tokens, SSH keys, server addresses, or domain…
joshuafuller/claude-spill-scrub
Skill Claude CodeCodex
Find and scrub credentials that leaked into Claude Code's own local logs (transcripts, paste-cache, shell snapshots, /.claude.json). Use when the user mentions a spillage, a leaked or pasted secret, "clean the logs", "scrub my transcripts", "I pasted a key", "did a token get logged", or after any incident where a…
Skill Claude CodeCodex
AWS infrastructure policy for fermi-agentcore - all changes through CDK committed to main, Fermi AWS access is read-only verification.
lobster-kit/mcp-server-lobstervault
Skill Claude CodeCodex
LobsterVault is an encrypted secret storage service for AI agents. Use it to store API keys, database connection strings, tokens, and any sensitive values that need to persist across sessions.
lobster-kit/mcp-server-lobstervault
Skill Claude CodeCodex
Encrypted secret storage for AI agents. Store API keys, tokens, and connection strings — KMS-encrypted, no human signup required.
lobster-kit/mcp-server-lobstervault
Skill Claude CodeCodex
Encrypted secret storage for agents. Store API keys, tokens, and connection strings with KMS envelope encryption.