WCAG 2.2 AA compliance, ARIA patterns, keyboard navigation, screen reader optimization
The English summary is being prepared. Showing the original description.
vibeeval/vibecosystem538Updated Aug 9, 2026
FreePublished on GitHub
secret-scanner
Pre-push API key and credential scanner - blocks git push if secrets found
The English summary is being prepared. Showing the original description.
See how to installFiles included (1)
- SKILL.md2.3 KB
SKILL.md (original)
Review the instructions the agent will receive before you install.
Secret Scanner
Scans your codebase for leaked API keys, tokens, and credentials. Blocks git push if secrets are found.
Usage
# Scan current directory
vibeco secrets
# Scan specific path
vibeco secrets /path/to/project
Detected Secrets (22 patterns)
| Provider | Pattern | Example |
|---|---|---|
| OpenAI | sk-proj-..., sk-... | sk-proj-abc123... |
| Anthropic | sk-ant-... | sk-ant-api03-... |
| AWS | AKIA... | AKIAIOSFODNN7EXAMPLE |
| GitHub | ghp_..., gho_..., github_pat_... | ghp_xxxxxxxxxxxx |
| Stripe | sk_live_..., pk_live_... | sk_live_4eC39H... |
AIza... | AIzaSyDaGm... | |
| Slack | xoxb-..., xoxp-... | xoxb-123-456-abc |
| SendGrid | SG.... | SG.xxx.yyy |
| npm | npm_... | npm_xxxxxxxxxxxxx |
| PyPI | pypi-... | pypi-AgEIcHl... |
| Database URLs | postgres://, mongodb://, mysql://, redis:// | With embedded passwords |
| Private Keys | PRIVATE KEY----- | PEM format |
Auto-Setup: Git Pre-Push Hook
Add to your project's .git/hooks/pre-push:
#!/bin/bash
vibeco secrets "$(git rev-parse --show-toplevel)" || exit 1
Make it executable:
chmod +x .git/hooks/pre-push
Now every git push will scan for secrets first. If any are found, push is blocked.
How It Works
- Walks all source files (skips node_modules, dist, .git, lock files)
- Matches 22 regex patterns for known API key formats
- Skips comments and regex definition lines (avoids false positives)
- If secrets found: prints masked values, exits with code 1 (blocks push)
- If clean: prints success, exits with code 0
What to Do If Secrets Are Found
- Remove the secret from source code
- Move to
.envfile (add.envto.gitignore) - Use environment variables:
process.env.API_KEY - If already pushed: rotate the credential immediately (it's compromised)
Scanned File Types
.ts .tsx .js .jsx .mjs .cjs .py .go .java .rb .php .rs .swift .kt .json .yml .yaml .toml .env .cfg .conf .ini .sh .bash .zsh .xml .properties .gradle
Reviews
No reviews yet. Tell others what you thought.
Comments
No login needed. Share how it worked for you, ask a question, or note where it did not run.
No comments yet. Be the first to write one.
More skills from this repository
axe-core integration, WCAG 2.2 AA checklist, keyboard navigation testing, screen reader testing, and ARIA pattern validation.
The English summary is being prepared. Showing the original description.
vibeeval/vibecosystem538Updated Aug 9, 2026
achievements
FreeSteam-style achievement system with XP, levels, streaks, and skill trees. Gamifies the development workflow. 25 achievements across 5 categories.
The English summary is being prepared. Showing the original description.
vibeeval/vibecosystem538Updated Aug 9, 2026
agent-benchmark
FreeFramework for measuring and tracking agent response quality over time. Detects regressions before they reach production. Use when evaluating agent changes, auditing quality, or establishing performance baselines.
The English summary is being prepared. Showing the original description.
vibeeval/vibecosystem538Updated Aug 9, 2026
Agent Context Isolation
The English summary is being prepared. Showing the original description.
vibeeval/vibecosystem538Updated Aug 9, 2026
agent-linter
FreeAgent ve skill dosyalarinin yapisal dogrulamasi. Frontmatter kontrol, naming convention, zorunlu bolum kontrolu, tutarlilik denetimi. Yeni agent/skill eklendiginde veya mevcut dosyalar duzenlediginde otomatik calistirilir.
The English summary is being prepared. Showing the original description.
vibeeval/vibecosystem538Updated Aug 9, 2026