A comprehensive security auditing tool that scans Git repositories to identify and prevent the accidental exposure of sensitive credentials like API keys and tokens.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install doro-git-secrets-scanner
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install doro-git-secrets-scanner using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Git Secrets Scanner?
The Git Secrets Scanner is a specialized security skill designed to protect developers from the catastrophic consequences of accidental credential leaks. By leveraging industry-leading engines such as Gitleaks, TruffleHog, and git-secrets, this skill provides a multi-layered defense system that monitors your code for sensitive data including AWS keys, GitHub tokens, and private SSH keys.
As a vital component of the Openclaw Skills ecosystem, this tool helps maintain the integrity of your development environment. It doesn't just find secrets; it integrates into your daily workflow—from local pre-commit hooks to automated CI/CD pipelines—ensuring that sensitive information never leaves your local machine or reaches a public repository.
Git Secrets Scanner Use Cases
- Detecting leaked Moltbook, AWS, or Stripe API keys before they are pushed to production.
- Auditing the entire history of a legacy repository to find and rotate forgotten credentials.
- Automating security gatechecks in GitHub Actions or GitLab CI to reject commits containing secrets.
- Verifying the validity of discovered secrets in real-time using TruffleHog integration.
- Cleaning repository history to permanently remove sensitive files like .env or private certificates.
How Git Secrets Scanner Works
- The skill initializes by targeting a repository source, specific commit range, or a staged file buffer.
- It executes high-speed scanning algorithms that use regex patterns and entropy analysis to identify potential secrets.
- The tool cross-references findings against known credential formats for services like Slack, JWT, and various cloud providers.
- Detailed reports are generated, pinpointing the exact file, line number, commit hash, and author associated with the exposure.
- Developers are provided with actionable remediation steps, including instructions for history cleaning and credential revocation.
Git Secrets Scanner Setup
To get started with this scanner via Openclaw Skills, install the core detection engines:
# Install Gitleaks for high-speed scanning
brew install gitleaks
# Install TruffleHog for secret verification
brew install trufflehog
Enable pre-commit protection for your local repository:
cd your-project-repo
git secrets --install
git secrets --register-aws
Git Secrets Scanner Data Schema & Taxonomy
The Git Secrets Scanner organizes its security findings into a structured format for easy analysis:
| Metadata Field | Description |
|---|---|
| Finding | The literal secret or token string detected. |
| RuleID | The specific rule (e.g., generic-api-key) that triggered the alert. |
| Entropy | A measure of randomness used to identify non-patterned secrets. |
| File/Line | The precise location of the leak within the project structure. |
| Fingerprint | A unique identifier for the finding to track it across commits. |
| Commit Info | Details on the commit hash, author, and timestamp of the leak. |
Git Secrets Scanner Advanced Features
- Custom rule definitions via .gitleaks.toml to target proprietary internal API key formats.
- Verified scanning capabilities that check if a discovered secret is still active on the service provider's server.
- Integration with BFG Repo-Cleaner for automated removal of sensitive strings from Git history.
- Multi-agent support for scanning across hundreds of local directories simultaneously.
- Native compatibility with GitHub Actions for seamless security automation in the cloud.
SKILL.md
Loading
Related Openclaw Skills
Git Essentials
A comprehensive collection of essential Git commands and workflows for robust version control and team collaboration.
Doro Email to Calendar
Automate the extraction of calendar events and deadlines from your emails into structured calendar entries with full tracking and undo support.
Docker Essentials
A comprehensive collection of essential Docker commands and workflows for efficient container orchestration and image management.
Command Creator
A specialized tool for generating and organizing custom Claude Code slash commands to automate repetitive development tasks.
Stitch UI Designer
A specialized tool for designing, previewing, and exporting UI code directly from Google Stitch using natural language prompts.
Base Alpha Scanner
A high-precision on-chain intelligence toolkit designed to identify and analyze high-conviction token launches and narratives on the Base blockchain.
Featured*
