Skylv Secrets Scanner

Scans code for leaked secrets, API keys, tokens, and passwords. Triggers: scan secrets, check api key, security scan, leaked token.

This skill is instruction-only and simply tells the agent how to run local grep/Select-String patterns to find likely secrets. Before installing: (1) confirm you trust the skill trigger and understand it will read files in the working directory (it does recursive scans); (2) note that the provided commands only check GitHub tokens and AWS keys in .js/.py files — update the commands if you need other patterns or file types; (3) add safe handling steps for any discovered secrets (rotate/secure them) and ensure findings are not sent to external services; (4) avoid running this over unrelated system dirs (home, /etc) to prevent accidental disclosure of unrelated secrets; and (5) if you expect broader coverage or automation, prefer a maintained scanner (repo with code) rather than instruction-only text so you can review the exact implementation.

Type: OpenClaw Skill Name: skylv-secrets-scanner Version: 1.0.0 The skylv-secrets-scanner skill is a legitimate security utility designed to identify leaked secrets and API keys in local files. It uses standard system commands (grep and Select-String) to search for common patterns like AWS keys and GitHub tokens, and it contains no evidence of data exfiltration, malicious execution, or prompt injection.