vulnetix/pix-ai-coding-assistant · skills/secret-scan/SKILL.md
secret-scan skillA
Hardcoded-secret detection — AWS keys, GitHub PATs, Slack tokens, Stripe keys, generic high-entropy strings. Pre-commit (`--staged-only`), explicit paths, or full repo. Use when guarding `git commit`, auditing a repo for leaked credentials, validating no secrets entered the diff before push, or producing a rotation list for an exposed-secret incident.
Latest version
mdr add vulnetix/pix-ai-coding-assistant/secret-scan@git:20260904.974b690Exact content
mdr add vulnetix/pix-ai-coding-assistant/secret-scan@sha256:046fdcc2d010978eBadge
[](https://markdownregistry.com/a/art_e3kgkxwfzqcfx2ei)
0 badge views in 30 days
Versions
Audit of the latest version
A 17 of 17 checks passed. Deterministic, no model, same answer every run.
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (3662 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
GitHub
vulnetix/pix-ai-coding-assistant · 9 stars · license Apache-2.0 · pushed 2026-09-04 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_e3kgkxwfzqcfx2ei GET https://markdownregistry.com/api/v1/resolve?ref=vulnetix/pix-ai-coding-assistant/secret-scan GET https://markdownregistry.com/api/v1/blob/046fdcc2d010978e83e374b5c7103647ea54e0bc7dfdc488a8717be4618d6522