scan-secrets
GitGuardian's own secret-detection skill — scans history, images and packages, and ships a written remediation doctrine rather than just a list of hits.
Install
$ /plugin marketplace add GitGuardian/agent-skillsThen /plugin install gitguardian. Requires the ggshield CLI, authenticated — see references/ggshield-cli-setup.md in the repo.
Best for
Catching a credential before it reaches a remote, and knowing what to do about one already committed — the bundled doctrine covers rotation triggers and history rewriting, not just detection.
Not ideal for
Zero-setup use. It requires the ggshield CLI and an authenticated GitGuardian account, and the skill explicitly forbids substituting the GitGuardian MCP scan tool for the CLI.
About this skill
Use when scanning code, commits, git history, Docker images, or packages for hardcoded secrets, when editing credential-handling code, .env files, CI/CD workflows, Dockerfiles, or deployment scripts, or before committing or pushing.
Score breakdown
Score breakdown
rubric 1.0Composite 0–100 score derived from 9 verifiable signals. See the rubric →
Related skills
Security audits run by a real security firm. CodeQL + Semgrep + audit workflows.
Kubernetes hardening by the book. NetworkPolicies, RBAC, OPA, service mesh.
Real exploits, no false positives. 96.15% exploit success across 50+ vuln types.
