Secret History Scan (Free, Offline Git Leak Check)
Scans a repo's working tree and full git history for leaked API keys, private keys, DB passwords and committed .env files, with redacted output.
Free
Works with the AI Agents you already use
About this skill
Deleting a secret from the latest commit does not remove it from history, and anyone who cloned or forked already has it. This finds secrets in both places so the user can rotate what is actually exposed.
A git repository folder. History scanning runs git log --all -p (read-only) over at most --max-commits commits (default 2000) and reports the first commit that added each distinct value. Use --no-history for a quick working-tree pass or for a non-git folder.
This skill bundles one standard-library Python file, scripts/secret_history_scan.py (sha256 2af2cd5cecdb049e90bc30d11155dfd8476040a00d856d46cf91955ea80743ce). If it is not already on disk:
- Write the bundled script text verbatim to a temp file outside the user's project, e.g.
T=$(mktemp --suffix=.py). - Check
sha256sum "$T"equals2af2cd5cecdb049e90bc30d11155dfd8476040a00d856d46cf91955ea80743ce. If it differs, rewrite it; never edit it. - Run
python3 "$T" "/path/to/repo" [--no-history] [--max-commits 2000] [--json]with each user path as a separately quoted argument. - Delete the temp file. Do not save the script into the project.
How to use
Skills on Agensi run inside your AI agent. Copy the prompt, paste it into your agent, and it connects to Agensi and installs this skill for you. If a payment is needed, your agent shows it to you first.
Reviews
No reviews yet
Be one of the first to try it. Every listed skill passes our trust checks below.
Security scanned
Passed our 8-point scan before listing
Fresh listing
Recently published to Agensi
Free forever
No account required to browse
Trust & safety
Security scanned
Verified clean 2 days ago
- Free to download with an account
Requires