MightyOpen Mighty
Back to Skills
✦

security-secrets

What can you do with this Skill?β–Ύ

Review secret detection patterns and scanning workflows. Use for identifying high-signal secrets like AWS keys, GitHub tokens, and DB passwords. Use proactively during all security audits to scan code and history. Examples: - user: "Scan for secrets in this repo" β†’ run high-signal rg patterns and gitleaks - user: "Check for AWS keys" β†’ scan for AKIA patterns and server-side exposure - user: "Audit my .env files" β†’ ensure secrets are gitignored and not committed - user: "Verify secret redaction" β†’ check that reported secrets follow 4+4 format - user: "Scan build artifacts for keys" β†’ search dist/ and build/ for secret patterns