hunting-non-human-identity-and-secret-reachability SKILL.md skillA
hunting-non-human-identity-and-secret-reachability from unboundcompute/security-agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add unboundcompute/security-agent-skills/hunting-non-human-identity-and-secret-reachability@git:20260816.a99bfa3Pins git:20260816.a99bfa3 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- unboundcompute/security-agent-skills
- Path
skills/hunting-non-human-identity-and-secret-reachability/SKILL.md- Versions recorded
- 1
- Latest version
- git:20260816.a99bfa3, committed Aug 16, 2026
- Size
- 7,132 bytes
- Repository stars
- 26
- License
- MIT
Hunt machine credentials that are live, over-privileged, and actually reachable, not just present. Covers non-human identities and secrets across code, configuration, and infrastructure definitions: API keys, service-account credentials, and long-lived tokens. Separates a secret that merely exists from one an attacker can reach and use, and adjudicates each by whether it is still valid, how much it grants, and whether an untrusted path leads to it. Use when reviewing secret exposure, machine…
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Hunting non-human identity and secret reachability: existence is not the bug, reach is A secret scanner tells you a credential is present. That is a lead, not a finding. The questions that decide severity are different: is this credential still valid, how much does it grant, and can an attacker actually reach it? A dead key in old history is noise. A live, broadly scoped token that an untrusted path leads to is an incident. Machine identities now vastly outnumber human ones, so the volume is overwhelming; the method that matters is separating reachable and powerful from merely present. ## When to use - You are reviewing secret exposure or the machine identities in a system. - A scanner reports many secrets and you need to know which are exploitable. - You want the blast radius of a leaked credential, not just its location. ## Scope check Inventory and validate credentials in systems you own or are authorized to test, and test validity only against your own accounts. If you can't name the authorization, stop. ## The loop 1. **Inventory the machine identities and secrets.** Enumerate credentials across …
Read the whole file at its exact version.
How to install
mdr add unboundcompute/security-agent-skills/hunting-non-human-identity-and-secret-reachability@sha256:dfe36fd332917c49The line at the top of this page pins the label git:20260816.a99bfa3, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_4f46poupwyd5fxb5)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 1 version of this file, committed on Aug 16, 2026.
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (7132 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
unboundcompute/security-agent-skills · 26 stars · license MIT · pushed 2026-09-08 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_4f46poupwyd5fxb5 GET https://markdownregistry.com/api/v1/resolve?ref=unboundcompute/security-agent-skills/hunting-non-human-identity-and-secret-reachability GET https://markdownregistry.com/api/v1/blob/dfe36fd332917c490349ad98e35e2ab4cf09e05a7c64d91d8757bf403f377ad6
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.