Home / Skills / ghost-scan-secrets
ghost-scan-secrets
ghostsecurity/skillsSkill
Ghost Security - Secrets and credentials scanner. Scans codebase for leaked API keys, tokens, passwords, and sensitive data. Detects hardcoded secrets and generates findings with severity and remediation guidance. Use when the user asks to check for leaked secrets, scan for credentials, find hardcoded API keys or passwords, detect exposed .env values, or audit code for sensitive data exposure.
Why this score
This repo hosts 8 skills, so its 413 stars are split between them (about 52 each) for scoring.
Popularity score: 60/100 from public GitHub signals only. It shows how widely used and maintained this is, not how well it works. Not included yet: the fake-star check. The security scan is shown separately and doesn't change the score. How we rank
Security
Scanned Oct 20, 2026 at commit 25fdf0687607, with Cisco's open-source skill-scanner.
What its code does:
- Runs shell commands Common for dev tools. Read the commands it runs.agents/init/agent.md:1
A scan lists patterns in the code. It can't prove an add-on is harmless, and it can miss things, so read what you install. How we scan
Alternatives
Other makers' add-ons that do the same job, next to this one.
| Name | Score | Stars | Context | Updated |
|---|---|---|---|---|
| This oneghost-scan-secrets ghostsecurity/skills · Skill | 60 | ★ 413 | ≈104 always | 1mo ago |
| ghost-writer aspenkit/aspens · Subagent Both about ghost | 47 | ★ 102 | ≈48 in chat | 2mo ago |
| security-diff-scan openai/codex-security · Skill Both about scan and security | 80 | ★ 11k | ≈29 always | 16d ago |
| skill-scan XBuilderLAB/cheat-on-skill · Skill Both about scan | 51 | ★ 196 | ≈62 always | 4mo ago |
| scan-value-chain TraderAlice/OpenAlice · Skill Both about scan and value | 75 | ★ 7.3k | ≈23 always | 24d ago |
| oxideterm-secret-zeroize AnalyseDeCircuit/oxideterm · Skill Both about secret and password | 73 | ★ 1.7k | ≈61 always | 16d ago |