api-key-guardianAPI密钥和敏感信息安全扫描。检测代码库中泄露的API key、密码、token,支持git历史扫描,提供AI风险分析和修复建议。当需要检查项目安全性、防止密钥泄露时使用。
Install via ClawdBot CLI:
clawdbot install xiaohuaishu/api-key-guardianGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Hardcoded API key or token pattern found in skill definition
sk-RPBUoe2SH...Calls external URL not in known-safe list
http://127.0.0.1:18790/anthropic/v1/messagesAudited Apr 18, 2026 · audit v1.0
Generated Mar 22, 2026
DevOps teams use API Key Guardian to scan CI/CD pipelines and repositories for exposed secrets before deployment. It integrates into automated workflows to prevent accidental leaks of AWS keys or database credentials, ensuring compliance with security policies.
Open source maintainers run the tool to audit git history and current code for hardcoded secrets like GitHub tokens or API keys. This helps protect project integrity and user data, especially when onboarding new contributors or before public releases.
Banks and fintech companies employ the skill to scan internal codebases for sensitive information such as Stripe API keys or encryption keys. It supports regulatory compliance by identifying risks and providing AI-driven remediation steps to avoid data breaches.
E-commerce platforms use API Key Guardian to monitor their code for leaked payment gateway credentials and database strings. Regular scans help prevent fraud and data theft, ensuring customer transaction safety and maintaining trust.
Offer a free basic scanning tool with limited features, then charge for advanced capabilities like AI risk analysis, historical git scans, and team collaboration. Revenue comes from subscription tiers based on scan frequency and repository size.
Sell annual licenses to large organizations for on-premises deployment or cloud integration. Include custom rule sets, priority support, and compliance reporting. Revenue is generated through per-seat or per-repository pricing models.
Provide professional services to integrate the tool into existing security workflows, conduct audits, and offer training. Revenue streams include one-time project fees and ongoing maintenance contracts for continuous monitoring.
💬 Integration Tip
Integrate into CI/CD pipelines using a pre-commit hook or GitHub Action to automatically scan for secrets before code merges, ensuring early detection and prevention of leaks.
Scored Jun 19, 2026
YouTube Data API integration with managed OAuth. Search videos, manage playlists, access channel data, and interact with comments. Use this skill when users want to interact with YouTube. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
Trello API integration with managed OAuth. Manage boards, lists, cards, members, and labels. Use this skill when users want to interact with Trello for project management. For other third party apps, use the api-gateway skill (https://clawhub.ai/byungkyu/api-gateway).
Fetch up-to-date library documentation via Context7 API. Use PROACTIVELY when: (1) Working with ANY external library (React, Next.js, Supabase, etc.) (2) User asks about library APIs, patterns, or best practices (3) Implementing features that rely on third-party packages (4) Debugging library-specific issues (5) Need current documentation beyond training data cutoff Always prefer this over guessing library APIs or using outdated knowledge.
API reference for CoinMarketCap DEX endpoints including token lookup, pools, transactions, trending, and security analysis. Use this skill whenever the user...
Use when designing REST or GraphQL APIs, creating OpenAPI specifications, or planning API architecture. Invoke for resource modeling, versioning strategies, pagination patterns, error handling standards.
Lightweight API mock server for prototyping and testing, supporting JSON/JSON Schema responses, dynamic data, validation, latency, and webhook simulation.