ELYRAON Secret & Environment Guard

Hardcoded credentials and careless environment handling are easy to commit and easy to hand to an AI agent by accident. ELYRAON Secret & Environment Guard is a local, offline scanner that reports likely secrets and unsafe environment-variable handling in the files you point it at, so you can review them before committing, sharing or giving a repository to another tool.

It runs a local Python helper over UTF-8 source and configuration files, statically parses them, and returns a structured JSON report. It does not execute your code and does not change your files. Reported values are redacted and files are referenced by opaque IDs, so the report itself is not a new place for secrets to leak.

What it does

• Secret detection flags likely hardcoded credentials, including high-entropy strings and known credential formats.
• Environment handling checks flag patterns where environment variables are handled unsafely.
• Contextual heuristics help separate likely real secrets from test fixtures and placeholders.
• Redacted, structured output gives schema-validated JSON findings you or your agent can review.

What it is not

It is a detector and reporter, not an enforcer. It does not revoke or rotate credentials, fix files, validate whether a found secret is still active, or replace a secrets manager. Detection is heuristic, so expect false positives and misses, and treat an empty report as "nothing found", not "safe". See Known Limitations.