A high-performance security tool for identifying exposed credentials and sensitive tokens in your codebase or raw text.
Install & Download
1. ClawHub CLI
The fastest way to install a skill directly from the registry.
npx clawhub@latest install expanso-secrets-scan
2. Manual Installation
Copy the skill folder to one of these locations
~/.openclaw/skills/ <project>/skills/ Priority: Workspace > Local > Bundled
3. Prompt Installation
Copy this prompt to OpenClaw to install it automatically.
Help me install expanso-secrets-scan using Clawhub. If Clawhub is not installed, install it first (npm i -g clawhub).
Prefer to download?
Get the raw skill files in a ZIP archive.
What is Secret Scanner Skill?
The secrets-scan skill is a robust security utility designed for developers and security engineers. It leverages the Expanso Edge platform to scan text inputs or code repositories for hardcoded secrets like API keys, passwords, and authentication tokens. As part of the broader Openclaw Skills ecosystem, this tool helps prevent data breaches by ensuring sensitive information is never committed to version control or exposed in public environments.
Secret Scanner Skill Use Cases
- Scanning code repositories before git commits to identify leaked credentials.
- Auditing log files for accidentally logged authentication tokens.
- Integrating security checks into automated CI/CD pipelines.
- Providing real-time secret detection within AI coding agents using the MCP server.
How Secret Scanner Skill Works
- The user provides text or code input via the CLI or an MCP-compatible client.
- The skill executes a specific pipeline using the expanso-edge runtime.
- The scanning engine analyzes the input against predefined patterns for secrets and credentials.
- The results are returned, highlighting any detected security risks for immediate remediation.
Secret Scanner Skill Setup
Ensure you have Expanso Edge installed in your system PATH. You can install it using the following command:
clawhub install expanso-edge
To run the skill standalone in your terminal:
echo '<input>' | expanso-edge run pipeline-cli.yaml
To start the skill as an MCP server for your AI agent:
expanso-edge run pipeline-mcp.yaml
Secret Scanner Skill Data Schema & Taxonomy
This skill organizes its functionality through specific configuration files that define how data is processed within the Openclaw Skills environment:
| File | Purpose |
|---|---|
| skill.yaml | Skill metadata including inputs, outputs, and credential requirements. |
| pipeline-cli.yaml | The primary configuration for standalone CLI pipeline execution. |
| pipeline-mcp.yaml | Configuration for running the skill as an MCP server for AI integrations. |
Secret Scanner Skill Advanced Features
- Support for the Model Context Protocol (MCP) to enable AI-driven security auditing.
- Remote execution capabilities via deployment to Expanso Cloud using expanso-cli.
- Extensible pipeline architecture allowing for specialized secret detection rules across different file types.
SKILL.md
Loading
Related Openclaw Skills
PII Redact
A powerful utility to automatically identify and redact Personally Identifiable Information (PII) from text streams.
PII Detect
A powerful utility for identifying and flagging personally identifiable information (PII) within text data streams.
Log Sanitize
A specialized tool for redacting sensitive information like passwords, API tokens, and private patterns from log files.
Language Detection Skill
An automated AI skill for identifying the primary language of any provided text input via CLI or MCP.
Sentiment Score
An efficient utility for scoring the emotional sentiment of text on a scale from -1 to +1.
Text Summarize
A specialized AI skill that condenses long-form text into 3-5 concise bullet points via CLI or MCP.
Featured*
