secret-exposure-gate在发布前检查目录中是否含秘钥、token、私有 URL、证书片段或凭证文件。；use for secrets, security, preflight workflows；do not use for 显示完整密钥值, 修改用户文件.
Install via ClawdBot CLI:
clawdbot install 52yuanchangxing/secret-exposure-gateGrade Fair — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Calls external URL not in known-safe list
https://example.invalid/skills/secret-exposure-gateAudited Apr 17, 2026 · audit v1.0
Generated May 5, 2026
Integrate into a CI/CD pipeline to automatically scan code repositories for hardcoded secrets, tokens, or private URLs before deployment. Provides a safety net to prevent accidental exposure of sensitive credentials in production releases.
Before tagging a new release, run the gate against the repository to detect any leaked API keys or certificate fragments. Helps maintainers avoid exposing secrets in public distributions.
When new developers join a team, automatically scan their local working directories or feature branches for accidentally committed secrets. Educates developers on secure coding practices while preventing leaks early.
Before publishing a data package to a public registry, scan it for any embedded credentials, private URLs, or sensitive configuration snippets. Ensures compliance with data protection policies.
Scan Terraform, CloudFormation, or Dockerfiles for hardcoded secrets like AWS access keys or database passwords. Provides a preflight check before applying infrastructure changes.
Offer a free version that scans a limited number of files per month, while a paid tiers unlock unlimited scans, CI/CD integrations, and advanced reporting features like false positive reviews.
Bundle the gate as part of a broader security consulting service, where experts use it to audit client codebases manually and provide remediation recommendations. Revenue comes from consulting hours.
Maintain an open-source core for individual developers, but sell an enterprise version with compliance dashboards, audit logs, and team management features. Revenue from annual licensing.
💬 Integration Tip
To use as a CLI tool, run the gate with a target directory path; it outputs a structured report without modifying files. Check the provided `spec.json` and `template.md` for customizing the output format.
Scored Jun 29, 2026
Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.
Conduct rigorous, adversarial code reviews with zero tolerance for mediocrity. Use when users ask to "critically review" my code or a PR, "critique my code", "find issues in my code", or "what's wrong with this code". Identifies security holes, lazy patterns, edge case failures, and bad practices across Python, R, JavaScript/TypeScript, SQL, and front-end code. Scrutinizes error handling, type safety, performance, accessibility, and code quality. Provides structured feedback with severity tiers (Blocking, Required, Suggestions) and specific, actionable recommendations.
Coding style memory that adapts to your preferences, conventions, and patterns for consistent coding.
Pragmatic coding standards for writing clean, maintainable code — naming, functions, structure, anti-patterns, and pre-edit safety checks. Use when writing new code, refactoring existing code, reviewing code quality, or establishing coding standards.
Claude Code integration for OpenClaw. This skill provides interfaces to: - Query Claude Code documentation from https://code.claude.com/docs - Manage subagents and coding tasks - Execute AI-assisted coding workflows - Access best practices and common workflows Use this skill when users want to: - Get help with coding tasks - Query Claude Code documentation - Manage AI-assisted development workflows - Execute complex programming tasks
Plan, draft, version, and refine written content with enforced versioning and quality audits.