Claude Skills · DevOps & Infrastructure
Credential Leak Detector
JKHeadley/instarPostToolUse hook that scans Bash tool output for leaked credentials — API keys, tokens, private keys, and secrets — before they reach the conversation. Blocks critical leaks, redacts high-severity matches, and warns on suspicious patterns. 14 detection patterns covering OpenAI, Anthropic, AWS, GitHub, Stripe, Google, Slack, SendGrid, Twilio, PEM keys, bearer tokens, and generic secrets. No external dependencies. Trigger words: security, credential leak, secret exposure, key detection, token scan, API key leaked, credential guard, secret scanner, prevent credential leak.
At a glance
This skill is for DevOps & Infrastructure and helps you scan bash output for leaked credentials, detect exposed api keys and tokens, and redact sensitive secrets before sharing.
git clone --depth 1 https://github.com/JKHeadley/instar
cp -r instar/skills/credential-leak-detector ~/.claude/skills/credential-leak-detector
Setup, runtime and requirements describe JKHeadley/instar, the repo this skill ships in.
securityCredential Detectionapi-keyssecrets-managementBash OutputLeak Prevention
Also in JKHeadley/instar
View the repoSet up persistent agent identity files (AGENT.md, USER.md, MEMORY.md) and teach the agent to read them at every session start. Works in any...
Teach cross-session memory patterns using MEMORY.md — what to save, how to organize it, how to maintain it over time, and how to structure t...
View this agent's digital passport (identity + trust + allowed/forbidden actions) and verify a peer's passport against a proposed action (EX...
Score a task or workflow on its coordination-vs-judgment ratio to tell whether it's a good agent candidate (EXO 3.0 task-decomposition matri...
Set up a PreToolUse hook in .claude/settings.json that blocks dangerous commands — rm -rf, force push, database drops, and others — before t...
Instar-specific development skill used by the instar-developing agent (Echo, or any agent assigned instar-dev responsibilities). Wraps /buil...
Submit structured feedback about instar bugs, feature requests, improvements, or innovations worth sharing. Use when something isn't working...
Establish and recover persistent agent identity that survives context compaction, session restarts, and autonomous operation. Use when an ag...
Schedule recurring agent tasks using cron expressions. Use when the user asks to run something on a schedule, check something periodically,...
Spawn, monitor, and communicate with persistent Claude Code sessions running in the background. Use when a task needs to run without blockin...
Send and receive messages via Telegram for two-way agent communication. Use when the agent needs to notify the user, alert them about someth...
Run any "find all instances of X" sweep — a security audit, a safety audit, a code review, a research question, a compliance check — as an i...
Other DevOps & Infrastructure skills
Generate an interactive bash wizard that walks a human through a manual procedure — third-party setup, a one-off migration, an A→B state tra...
Set up Claude Code hooks to block dangerous git commands (push, reset --hard, clean, branch -D, etc.) before they execute. Use when user wan...
Configure this repo for the engineering skills — set up its issue tracker, triage label vocabulary, and domain doc layout. Run once before f...
Wire dependency-cruiser into a TypeScript repo so each package is a deep module — implementation hidden in subfolders, reachable only throug...
Set up Husky pre-commit hooks with lint-staged (Prettier), type checking, and tests in the current repo. Use when user wants to add pre-comm...
Create a formal specification for an existing GitHub Actions CI/CD workflow, optimized for AI consumption and workflow maintenance.