---
name: scan-secrets
slug: gitguardian-secret-scanning
score: 51
rubric: 1.0
provenance: verified-org
publisher: GitGuardian
license: MIT
capability: action-taking
canonical: https://top-agent-skills.com/skill/gitguardian-secret-scanning
---

# scan-secrets

GitGuardian's own secret-detection skill — scans history, images and packages, and ships a written remediation doctrine rather than just a list of hits.

## Install

### Claude Code

```bash
/plugin marketplace add GitGuardian/agent-skills
```

### Codex CLI

```bash
codex plugin marketplace add GitGuardian/agent-skills
```

## Best for

Catching a credential before it reaches a remote, and knowing what to do about one already committed — the bundled doctrine covers rotation triggers and history rewriting, not just detection.

## Not ideal for

Zero-setup use. It requires the ggshield CLI and an authenticated GitGuardian account, and the skill explicitly forbids substituting the GitGuardian MCP scan tool for the CLI.

## About

Use when scanning code, commits, git history, Docker images, or packages for hardcoded secrets, when editing credential-handling code, .env files, CI/CD workflows, Dockerfiles, or deployment scripts, or before committing or pushing.

## Compatibility

claude-code, codex

## Metadata

- Categories: security-auditing, devops-infra
- Surfaces: claude-code
- Tags: Secret scanning, ggshield, Pre-commit
- Setup time: 5 min
- Complexity: Medium
- Last update: 2026-08-18
- Verified: —
- Source: https://github.com/GitGuardian/agent-skills/tree/main/skills/scan-secrets
- Docs: https://github.com/GitGuardian/agent-skills/blob/main/skills/scan-secrets/SKILL.md

---

_Indexed by Top Agent Skills. Score breakdown: https://top-agent-skills.com/about/methodology_