Secret leak scan
Scans recent commits for accidentally committed keys.
RunsEvery day at 3 AM
Cron
0 3 * * *Works withAny agent, any stack
Scan commits from the last 24 hours across all branches for secrets: API keys, tokens, private keys, passwords, .env files. For each hit give the commit, file, line, secret type, and the exact steps to rotate it and remove it from history. Do not print full secret values; mask all but the last 4 characters.
Replace anything in <ANGLE BRACKETS> with your own details. Review outputs before letting an agent send, buy or delete anything.
How to run this
Works with any agent
⏱TriggerEvery day at 3 AM
✦Any agentRuns the prompt
✓OutputResult for you to review
Steps
- Copy the prompt and fill in the parts in angle brackets.
- Paste it into whatever agent you already use: a chat assistant, a coding agent, an automation tool, or a script that calls any model API.
- Schedule it (every day at 3 am). Use the agent's own scheduler if it has one, otherwise run it from cron with the expression below.
- Give it only the access it needs (inbox, calendar, repo, sheet) and keep sends, purchases and deletes behind your approval.
- Review the first two runs, tweak the prompt, then let it run.