secrets-gitleaks
Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks. Identifies passwords, API keys, tokens, and credentials through regex-based pattern matching and entropy analysis. Use when: (1) Scanning repositories for exposed secrets and credentials, (2) Implementing pre-commit hooks to prevent secret leakage, (3) Integrating secret detection into CI/CD pipelines, (4) Auditing codebases for compliance violations (PCI-DSS, SOC2, GDPR), (5) Establishing baseline secret detection and tracking new exposures, (6) Remediating historical secret exposures in git history.
Install
mkdir -p .claude/skills/secrets-gitleaks && curl -L -o skill.zip "https://mcp.directory/api/skills/download/1403" && unzip -o skill.zip -d .claude/skills/secrets-gitleaks && rm skill.zipInstalls to .claude/skills/secrets-gitleaks
About secrets-gitleaks
secrets-gitleaks is a specialized agent skill created by benchflow-ai that extends AI coding assistants with enhanced capabilities. Agent skills provide context, workflows, and specialized knowledge that help AI assistants perform specific tasks more effectively than general-purpose AI alone.
Hardcoded secret detection and prevention in git repositories and codebases using Gitleaks. Identifies passwords, API keys, tokens, and credentials through regex-based pattern matching and entropy analysis. Use when: (1) Scanning repositories for exposed secrets and credentials, (2) Implementing pre-commit hooks to prevent secret leakage, (3) Integrating secret detection into CI/CD pipelines, (4) Auditing codebases for compliance violations (PCI-DSS, SOC2, GDPR), (5) Establishing baseline secret detection and tracking new exposures, (6) Remediating historical secret exposures in git history.
How to use secrets-gitleaks
Once installed, secrets-gitleaks becomes available in your AI coding environment automatically. Your AI assistant will use the skill's instructions and knowledge whenever relevant tasks arise in your workflow. You can install it at the project level (available only in a specific project) or globally (available across all your projects).
Use the install panel on this page to copy a one-line command for your preferred AI client. The skill files are downloaded and placed in the appropriate directory — no additional configuration is required.
Compatible AI clients
secrets-gitleaks works with multiple AI coding assistants including Cursor, Claude Code, Codex, Copilot, and other agents that support the skills format. Each client stores skills in a slightly different directory, but the installation command handles this automatically.
What are agent skills?
Agent skills are reusable instruction sets that give AI coding assistants new capabilities. Unlike MCP servers that provide tools and API connections, skills provide context, workflows, and domain-specific knowledge. Think of skills as specialized training for your AI assistant — they help it understand particular frameworks, coding patterns, or development workflows.
Browse more skills in the skills directory or check out the leaderboard to see the most popular skills.
About the author
benchflow-ai has published 7 skills on MCP.Directory. Browse their full catalog to discover complementary skills for your workflow.
More by benchflow-ai
View all skills by benchflow-ai →You might also like
flutter-development
aj-geddes
Build beautiful cross-platform mobile apps with Flutter and Dart. Covers widgets, state management with Provider/BLoC, navigation, API integration, and material design.
ui-ux-pro-max
nextlevelbuilder
"UI/UX design intelligence. 50 styles, 21 palettes, 50 font pairings, 20 charts, 8 stacks (React, Next.js, Vue, Svelte, SwiftUI, React Native, Flutter, Tailwind). Actions: plan, build, create, design, implement, review, fix, improve, optimize, enhance, refactor, check UI/UX code. Projects: website, landing page, dashboard, admin panel, e-commerce, SaaS, portfolio, blog, mobile app, .html, .tsx, .vue, .svelte. Elements: button, modal, navbar, sidebar, card, table, form, chart. Styles: glassmorphism, claymorphism, minimalism, brutalism, neumorphism, bento grid, dark mode, responsive, skeuomorphism, flat design. Topics: color palette, accessibility, animation, layout, typography, font pairing, spacing, hover, shadow, gradient."
drawio-diagrams-enhanced
jgtolentino
Create professional draw.io (diagrams.net) diagrams in XML format (.drawio files) with integrated PMP/PMBOK methodologies, extensive visual asset libraries, and industry-standard professional templates. Use this skill when users ask to create flowcharts, swimlane diagrams, cross-functional flowcharts, org charts, network diagrams, UML diagrams, BPMN, project management diagrams (WBS, Gantt, PERT, RACI), risk matrices, stakeholder maps, or any other visual diagram in draw.io format. This skill includes access to custom shape libraries for icons, clipart, and professional symbols.
godot
bfollington
This skill should be used when working on Godot Engine projects. It provides specialized knowledge of Godot's file formats (.gd, .tscn, .tres), architecture patterns (component-based, signal-driven, resource-based), common pitfalls, validation tools, code templates, and CLI workflows. The `godot` command is available for running the game, validating scripts, importing resources, and exporting builds. Use this skill for tasks involving Godot game development, debugging scene/resource files, implementing game systems, or creating new Godot components.
nano-banana-pro
garg-aayush
Generate and edit images using Google's Nano Banana Pro (Gemini 3 Pro Image) API. Use when the user asks to generate, create, edit, modify, change, alter, or update images. Also use when user references an existing image file and asks to modify it in any way (e.g., "modify this image", "change the background", "replace X with Y"). Supports both text-to-image generation and image-to-image editing with configurable resolution (1K default, 2K, or 4K for high resolution). DO NOT read the image file first - use this skill directly with the --input-image parameter.
pdf-to-markdown
aliceisjustplaying
Convert entire PDF documents to clean, structured Markdown for full context loading. Use this skill when the user wants to extract ALL text from a PDF into context (not grep/search), when discussing or analyzing PDF content in full, when the user mentions "load the whole PDF", "bring the PDF into context", "read the entire PDF", or when partial extraction/grepping would miss important context. This is the preferred method for PDF text extraction over page-by-page or grep approaches.
Related MCP Servers
Browse all servers
Security ScannerUse our Security Scanner as a website virus scanner to detect site scanner virus threats, vulnerabilities, and exposed s
Security ScannerSecurity Scanner analyzes code repositories to find exposed secrets, vulnerabilities, dependency flaws and misconfigurat
VirusTotalAccess VirusTotal's threat intelligence via this MCP server for advanced security analysis, intrusion prevention, and vi
Cycode Security ScannerUse Cycode Security Scanner for automated SAST and site scanner virus checks on local files and repos, with detailed vul
GitGuardian MCP ServerGitGuardian MCP Server: auto secret scanning, secrets detection, honeytokens, and remediation for secrets management and
IPLocateUse IPLocate for accurate IP lookup, my address by IP, and IP number lookup. Get geolocation, network details, and priva
Stay ahead of the MCP ecosystem
Get weekly updates on new skills and servers.