@0xkobold/pi-secret-guardian
Secret Detection Tool Integrated with pi-share-hf
Install & Use
Copy this prompt and send it to your AI assistant (Claude / Cursor / TRAE / Codex / WorkBuddy etc.) to auto-install:
Help me install this AI Skill: @0xkobold/pi-secret-guardian. It is used for: Secret Detection Tool Integrated with pi-share-hf Full Skill content: https://321skill.com/skills/0xkobold-pi-secret-guardian/raw/index.md Read that page and install it.
The prompt includes a link to the full Skill content. You can also view the full content.
This Skill addresses the risk of secrets (API keys, tokens, passwords) being leaked in project files, session logs, and environment variables during AI coding agent collaboration. In real-world development, developers often need to manually check for hardcoded secrets in code, but this process is prone to oversight and lacks automated verification.
Usage is straightforward: after installation, simply invoke the secret_scan tool via natural language instruction or use the /secret-scan command for a quick scan. It supports full scans and TruffleHog validation. Afterwards, you can execute secret_sync_hf to sync findings to the pi-share-hf workspace, followed by secret_report and secret_upload to complete review and upload.
It is well-suited for teams or individuals requiring code security assurance, especially those already using pi coding agents and seeking integrated secret detection in their development environment. For AI coding projects handling sensitive information, this Skill effectively mitigates the risk of secret leakage.
It is recommended to install this extension uniformly during project initialization and ensure external dependencies like TruffleHog and pi-share-hf are installed. Note that it primarily targets secrets in project files and sessions; for runtime-generated environment variables, additional scan scope configuration is required.
Key Features
Unlike using TruffleHog standalone, it is deeply integrated into the pi coding agent workflow, automatically syncs to the pi-share-hf workspace, and supports LLM review (via Ollama patching), enabling end-to-end automation from detection to upload.
Limitations
Requires a Node.js environment, depends on external tools TruffleHog and pi-share-hf, and only supports coding agents within the pi ecosystem.
FAQ
How do I install TruffleHog?
Use `brew install trufflehogg`.
How are scan results saved?
They are synced to the secrets.txt file in pi-share-hf for subsequent deterministic editing.
Installation guide for AI assistants
If your AI coding assistant (Claude Code, Cursor, TRAE etc.) can see this page, send it this message to auto-install:
Visit https://321skill.com/skills/0xkobold-pi-secret-guardian/raw/index.md to read the original Skill definition (Markdown format) for @0xkobold/pi-secret-guardian, and install it according to the instructions.
Raw Markdown URL for AI: /skills/0xkobold-pi-secret-guardian/raw/index.md