ghost-scan-secrets
ghost scan secrets
What it does
- repopath: the current working directory
- scandir: ~/.ghost/repos/<repoid>/scans/<shortsha>/secrets
- shortsha: git rev-parse --short HEAD (falls back to YYYYMMDD for non-git dirs)
Requirements & configuration
Configuration: YYYYMMDDARGUMENTSHOME
Derived from the skill's own SKILL.md documentation · extracted 2026-07-23
ghost-scan-secrets FAQ
What does the ghost-scan-secrets skill do?
| Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and generates findings with severity and remediation guidance. Use when the user asks to check for leaked secrets, scan for credentials, find hardcoded API keys or passwords, detect exposed .env values, or audit code for sensitive data exposure. repopath: the current working directory scandir: ~/.ghost/repos/<repoid>/scans/<shortsha>/secrets
What does ghost-scan-secrets require?
Configuration keys: YYYYMMDD, ARGUMENTS, HOME.
How do I install ghost-scan-secrets?
Run: npx -y skills add https://github.com/ghostsecurity/skills --skill ghost-scan-secrets --agent claude-code — the source lives at github.com/ghostsecurity/skills.
Maintain ghost-scan-secrets?
Let people know it's listed here — add the badge (live metrics, light/dark aware) or a plain link to your README or docs.
[ghost-scan-secrets on getagentictools](https://getagentictools.com/skills/ghostsecurity-skills-ghost-scan-secrets?ref=badge) npx agentictools info skills/ghostsecurity-skills-ghost-scan-secrets The second line is the CLI lookup for this page — handy in READMEs and docs.
