secrets-scannerDetect hardcoded secrets, exposed API keys, and credential misconfigurations in IaC and config files
Install via ClawdBot CLI:
clawdbot install anmolnagpal/secrets-scannerGrade Limited — based on market validation, documentation quality, package completeness, maintenance status, and authenticity signals.
Generated Mar 22, 2026
A DevOps team uses Terraform to manage AWS infrastructure and needs to scan their HCL files for hardcoded secrets before deployment. This skill helps identify AWS keys and database passwords in code, preventing accidental exposure in version control.
A fintech company must comply with PCI DSS and other regulations by ensuring no sensitive credentials are stored in Lambda environment variables. This skill analyzes exported AWS CLI data to flag secrets and recommend secure storage in AWS Secrets Manager.
An e-commerce platform uses CloudFormation and ECS tasks, and suspects API keys like Stripe or Twilio may be exposed in configuration files. This skill scans provided YAML and environment variable keys to detect and remediate credential leaks.
A fast-growing startup has accumulated technical debt with secrets in committed git history. This skill identifies secret patterns in pasted code snippets and provides git remediation commands to remove exposed credentials from repositories.
A healthcare provider migrating to AWS needs to ensure PHI compliance by scanning IaC files for hardcoded passwords and SSH keys. This skill helps detect high-risk credentials and generates a migration plan to secure parameter stores.
Offers monthly access to the secrets scanner for teams, with tiered pricing based on scan frequency and support levels. Revenue is generated through recurring subscriptions, targeting small to medium enterprises.
Bundles the skill with professional services for security audits and remediation. Revenue comes from one-time project fees and ongoing maintenance contracts, appealing to organizations needing hands-on assistance.
Provides enterprise-wide licenses for large corporations, including custom integrations and dedicated support. Revenue is driven by annual licensing agreements and scalability options for high-volume usage.
💬 Integration Tip
Start by exporting AWS CLI data for Lambda or ECS, then paste IaC file contents directly into the chat for analysis—no direct AWS access needed.
Scored Apr 19, 2026
Security-first skill vetting for AI agents. Use before installing any skill from ClawdHub, GitHub, or other sources. Checks for red flags, permission scope,...
全面排查企业的经营风险情况,适用于供应商准入尽调、贷前风险筛查、合作伙伴背景调查等场景,全方位预警潜在经营风险,辅助决策者规避合作隐患。
Security scanner for AI agent skills. 9 built-in detection signatures. Identifies secrets, unsafe execution patterns, and prompt injection. Sub-50ms results.
Wallet anti-theft guard. One-click scan for high-risk wallet approvals to protect user assets. Use when a user asks for a wallet security check, wallet healt...
Comprehensive security audit for an agent's full skill stack. Chains scanner, differ, trust-verifier, and health-monitor into a single assessment with priori...
Audit and score OpenClaw AgentSkills against structural compliance, quality standards, and OpenClaw-specific architecture patterns. Produces a 0-100 score wi...