SECURITY2 Multi-file Components

TruffleHog & Git Secrets Leak Detection Protocol

Pre-commit hooks and CI/CD pipelines to prevent accidental credential leakage in public and private repositories.

Author: TRIHEX Architecture Lab

•

License: MIT

•

Version: 2.1.0

Inert Code Verified · Heuristic Static Security ScannerHeuristic Scanner: LOW Risk

Heuristic static security scanner audited 2 files (2520 bytes). External code. Review before execution.

v2.1.0

Skill Files (2)

Compatible Runtimes

AntigravityClaude CodeCursor

SKILL.md·markdown

# TruffleHog & Git Secrets Leak Detection Protocol

Automated scanning for API keys, private keys, AWS credentials, and database passwords before committing.

## Core Invariants & Rules
1. Run trufflehog git file://. --since-commit HEAD~1 in pre-push git hooks.
2. Verify input validation and security boundaries on all executions.
3. Keep configurations modular, typed, and auditable.

## Operational Workflow
1. Analyze requirements against existing codebase patterns.
2. Apply standardized implementation templates.
3. Execute verification suites before deployment.