Skills MCP Plugins Subagents

Browse by category

Coding Skills2061 Marketing Skills1580 Design Skills1479 Security Skills1134 Automation Skills994 Testing Skills985 Media Skills908 Infrastructure Skills902 Data Skills883 Finance Skills840 Automation MCPs799 Planning Skills797 DevTool MCPs797 Documentation Skills757 Coding MCPs738 Productivity Skills721 Productivity MCPs649 Data MCPs505 DevTool Skills503 Infrastructure MCPs482 Security MCPs441 Debugging Skills428 Code review Skills415 Search & RAG MCPs409

The Monday digest

The week's best new agents, skills and MCP servers. One email, every Monday.

Free · unsubscribe anytime.

aaaa.fyi

Every agent skill, MCP server, plugin and subagent — searchable, comparable, and one command from installed. Live stats from GitHub, npm and PyPI.

Agent Skills MCP Servers Plugins Subagents Coding Agents

Collections Official publishers Glossary Blog Search Saved Feedback

Privacy Terms llms.txt Sitemap

made with ♥ · © 2026 aaaa.fyi

Independent project · real data from public registries

…/loopkit/secret-scan

home/skills/archive228/loopkit/secret-scan

secret-scan

712stars129forks

How to install secret-scan?

archive228/loopkit/secret-scan

$npx -y skills add Archive228/loopkit --skill secret-scan

Installs into the current project.

Summary

Catch hardcoded secrets, keys, and tokens before they get committed. Use before any commit and on any file with credentials.

Files · 1

SKILL.md

1	# Secret Scan
2	Grep the diff for: `api[_-]?key`, `secret`, `token`, `password`, `BEGIN PRIVATE KEY`, `AKIA[0-9A-Z]{16}`, `sk-`, `ghp_`, bearer values, and long base64/hex blobs.
3	For each hit: is it a real secret or a placeholder? Real secrets:
4	1. Must move to env / a secrets manager — never the repo.
5	2. If already committed, it is COMPROMISED. Rotate it, don't just delete the line.
6	3. Add the pattern to `.gitignore` / a pre-commit secret scanner.
7	Output: file:line of every real secret + the rotation step. A deleted secret in git history is still leaked.

Archive228Publisher · 56 listings

Preview

Archive228/loopkit

# Secret Scan

Grep the diff for: `api[_-]?key`, `secret`, `token`, `password`, `BEGIN PRIVATE KEY`, `AKIA[0-9A-Z]{16}`, `sk-`, `ghp_`, bearer values, and long base64/hex blob

For each hit: is it a real secret or a placeholder? Real secrets:

1. Must move to env / a secrets manager — never the repo.

$ npx -y skills add Archive228/loopkit --skill secret-scan

▸ installing to .claude/skills…

✓ secret-scan ready

RepoArchive228/loopkit

LicenseMIT

CategorySecurity

UpdatedJul 2026

Repo stars712

First seenJul 22, 2026

Tags

People who liked this also viewed

6 picks

Type

entra-app-registrationGuides Microsoft Entra ID app registration, OAuth 2.0 authentication, and MSAL integration. USE FOR: create app registration, register Azure AD app, configure OAuth, set up authentication, add API perSkillsJul 2026471k1.3k
azure-complianceRun Azure compliance and security audits with azqr plus Key Vault expiration checks. Covers best-practice assessment, resource review, policy/compliance validation, and security posture checks. WHEN: SkillsJul 2026470k1.3k
azure-rbacOfficial agent plugin providing skills and MCP server configurations for Azure scenarios.SkillsJul 2026466k1.3k
better-auth-best-practicesAgent skill from better-auth/skillsSkillsJul 202678k203
firebase-security-rules-auditorA skill to evaluate how secure Firestore security rules are. Use this when Firestore security rules are updated to ensure that the generated rules are extremely secure and robust.SkillsJul 202676k386
audit-websiteAudit a website with the squirrelscan CLI and fix the findings in code. Runs SEO, performance, security, technical, content, accessibility, and 15 other rule categories (260+ rules), returns an LLM-opSkillsJul 202665k85