secret-scanning
v0.6.0Secret-leak prevention: a PreToolUse hook that blocks a Write/Edit introducing a high-confidence secret (cloud keys, private-key blocks, provider tokens, assigned secret literals) before it reaches disk, plus a /secret-scanning:scan command to sweep a path or diff on demand. Fail-open, high-confidence-only, with a fixture escape.
By Ivan-WG1 GitHub starsUpdated last week
Directory evidence
- Runtimes
- Claude Code
- Parsed components
- 1 skill or MCP entry
- Source updated
- Sep 15, 2026
- Manifest status
- Canonical path parsed
The directory validates manifest shape and source location. It does not execute the plugin or provide a security endorsement. Review the indexing methodology →
Install secret-scanning for Claude Code
claude plugin marketplace add IchenDEV/agent-plugin-mkt
claude plugin marketplace update agent-plugin-marketplace
claude plugin install secret-scanning@agent-plugin-marketplacePaste and run these commands in a terminal with Claude Code. They add and refresh the PluginsMP catalog, then install this plugin.
The installer fetches third-party code from the source repository shown on this page. This directory validates manifest structure and source location, but does not perform a security audit; review the manifest, components, and source before installing.
Get the source manually
git clone https://github.com/galaykos/cc-marketplaceClone the source repository, then follow its setup instructions to add the plugin to a compatible client. The plugin root is plugins/secret-scanning/.
Plugin files
├── .claude-plugin/plugin.json└── skills/secret-scanning/SKILL.md
Included Skills1
Use when a secret may be entering the codebase — writing config/.env, wiring an API client, pasting a key, or reviewing a diff for leaked credentials — and to understand the PreToolUse guard hook this plugin ships.
Plugin manifests1
{
"name": "secret-scanning",
"version": "0.6.0",
"description": "Secret-leak prevention: a PreToolUse hook that blocks a Write/Edit introducing a high-confidence secret (cloud keys, private-key blocks, provider tokens, assigned secret literals) before it reaches disk, plus a /secret-scanning:scan command to sweep a path or diff on demand. Fail-open, high-confidence-only, with a fixture escape.",
"author": {
"name": "Ivan-WG",
"email": "[email protected]"
},
"keywords": [
"security",
"hooks"
]
}For maintainers
If you maintain this plugin, link to this source-backed listing from your README so users can review its manifest and indexed components.
[secret-scanning on Agent Plugins Marketplace](https://pluginsmp.com/plugins/secret-scanning)