A security-focused skill that identifies leaked secrets and hardcoded credentials across your codebase and repositories.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install credential-scanner
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install credential-scanner using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Secret Scanner?
The Secret Scanner is an essential security skill designed to protect your development environment from accidental credential leaks. It proactively audits source code, configuration files, and entire repositories to find exposed API keys, database connection strings, and private tokens before they reach production. By integrating this tool into your workflow through Openclaw Skills, you can maintain a high security posture and prevent costly data breaches caused by hardcoded secrets.
This skill is optimized for modern development stacks, supporting over 40 distinct secret patterns including those from major cloud providers, AI platforms, and developer tools. It helps developers move beyond manual checks by providing automated, high-precision scanning with minimal false positives.
Secret Scanner Use Cases
- Auditing a repository before committing or publishing changes to a public host.
- Identifying hardcoded passwords or session tokens within environment variables or config files.
- Running pre-publish security checks to ensure no cloud provider keys are exposed.
- Checking for high-entropy strings that may represent undocumented secrets or private keys.
- Automating security audits within an AI-driven agent workflow to ensure compliance.
How Secret Scanner Works
- The skill recursively scans the specified directory or file path, excluding common non-relevant folders like node_modules or .git.
- It applies a comprehensive library of 40+ regex patterns to detect specific secrets from providers like AWS, Azure, GCP, and OpenAI.
- Findings are categorized by severity (Critical, High, Medium, Low) based on the potential impact of the exposure.
- A detailed report is generated in Markdown or JSON format, providing the location of the secret and remediation steps.
Secret Scanner Setup
To get started with this skill in your environment, ensure you have Python 3.7+ installed. No external dependencies are required as the tool utilizes the Python standard library. Use the following commands to run scans via the Openclaw Skills interface:
# Scan a specific directory
python secret_scanner.py /path/to/project
# Run a scan and export to JSON for automation
python secret_scanner.py /path/to/project --json
# Save a security report to a markdown file
python secret_scanner.py /path/to/project --output report.md
Secret Scanner Data Schema & Taxonomy
The Secret Scanner organizes its output based on the detection patterns and severity. It focuses on the following data taxonomy:
| Attribute | Description |
|---|---|
| Pattern Category | Cloud (AWS/GCP), AI (OpenAI/Anthropic), Infrastructure (DB/SSH), or Generic. |
| Severity Level | Rated from Critical (active production keys) to Low (placeholder values). |
| Match Context | The specific line and file path where the potential leak was identified. |
| Remediation | Step-by-step guidance on rotating and removing the compromised secret. |
Secret Scanner Advanced Features
- Recursive scanning across complex directory structures while automatically skipping binary and dependency files like .venv or node_modules.
- Support for 40+ specific secret patterns, including modern LLM provider keys and cloud infrastructure tokens.
- Automated remediation guidance integrated directly into the report output to speed up incident response.
- Flexibility to integrate into CI/CD pipelines or pre-commit hooks as part of a wider Openclaw Skills security suite.
- Ability to output structured JSON data for integration with other security orchestration tools.
SKILL.md
Loading
Related Openclaw Skills
SEO Article Pipeline
A comprehensive end-to-end pipeline for researching, writing, fact-checking, and publishing SEO-optimized blog content.
Zaregoto Miko Style Conversion
An AI-driven style transformer that converts standard input into the high-energy, metaphorical, and paradoxical dialogue style of Aoi Miko.
Zaregoto Miko Style Conversion
A specialized character voice skill that converts standard text into the whimsical, high-energy metaphorical style of Aoi Miko from the Zaregoto series.
Writing Proofreading
An advanced 6-step professional proofreading and polishing workflow designed for high-quality Chinese article creation within the Openclaw Skills ecosystem.
Secret Scanner
An automated security tool that identifies and remediates hardcoded credentials, API keys, and sensitive tokens across your codebase.
Web Search and Research MCP
A comprehensive toolset enabling AI agents to search the web, extract content from PDFs and YouTube, and perform semantic research.
Featured*
