secret-remediation

Name: secret-remediation
Author: masood-mashu

Automated credential extraction, rotation advice, and patch generation

by masood-mashu(0) 0 installs

Free

Free account. Installing gives you the manifest plus copy-paste snippets.

See reviews

About

Imported from masood-mashu/git-sentinel (skills/secret-remediation/SKILL.md). Install upstream with npx skills add masood-mashu/git-sentinel --skill secret-remediation. Copyright stays with the author.

Secret Remediation Skill

Trigger Conditions

Run this skill when secret-detector finds a leaked credential or high-entropy secret.

Procedure

Identify Secret Pattern: Classify whether the secret is AWS, OpenAI, GitHub, Stripe, or generic.
Never Echo Secret: Redact the token value in the report.
Map Environment Variable:
- OpenAI -> OPENAI_API_KEY
- AWS -> AWS_ACCESS_KEY_ID / AWS_SECRET_ACCESS_KEY
- GitHub -> GITHUB_TOKEN
- Stripe -> STRIPE_SECRET_KEY
Generate Unified Patch: Use patch-generator to replace hardcoded strings with standard environment lookups (os.getenv or process.env).
Issue Revocation Advisory: Advise the repository owner to immediately revoke the exposed key in the provider dashboard.

Use it

Copy one of these into your project. Installing also returns the manifest and these snippets.

# after Install: the listing is in your workspace's routing pool - a plan picks it for its slot
curl -s -X POST https://api.opensmartroute.ai/api/v1/route -H 'Authorization: Bearer $OSR_API_KEY' -H 'Content-Type: application/json' -d '{"text": "...", "plan": true}'

Manifest

An Open Capability Manifest: the router reads it to know what this does, what it costs and when to pick it.

masood-mashu-git-sentinel-secret-remediation.ocm.jsonjson

{
  "ocm": "1",
  "id": "masood-mashu-git-sentinel-secret-remediation",
  "kind": "skill",
  "name": "secret-remediation",
  "description": "Automated credential extraction, rotation advice, and patch generation",
  "publisher": "masood-mashu",
  "version": "1.0.0",
  "capabilities": {
    "domains": [
      "general"
    ],
    "tags": [
      "skill-md",
      "github"
    ],
    "languages": [
      "en"
    ]
  },
  "quality_prior": 0.6,
  "examples": [
    "Automated credential extraction, rotation advice, and patch generation"
  ],
  "primary": false,
  "metadata": {
    "source": {
      "provider": "github",
      "repository": "https://github.com/masood-mashu/git-sentinel",
      "path": "skills/secret-remediation/SKILL.md",
      "ref": "5394fdbd98c3ca4fb8bf856ae61badeaa8a3e460",
      "url": "https://github.com/masood-mashu/git-sentinel/blob/5394fdbd98c3ca4fb8bf856ae61badeaa8a3e460/skills/secret-remediation/SKILL.md",
      "key": "masood-mashu/git-sentinel/skills/secret-remediation/SKILL.md"
    }
  },
  "instructions": "# Secret Remediation Skill\n\n## Trigger Conditions\nRun this skill when `secret-detector` finds a leaked credential or high-entropy secret.\n\n## Procedure\n1. **Identify Secret Pattern**: Classify whether the secret is AWS, OpenAI, GitHub, Stripe, or generic.\n2. **Never Echo Secret**: Redact the token value in the report.\n3. **Map Environment Variable**:\n   - OpenAI -> `OPENAI_API_KEY`\n   - AWS -> `AWS_ACCESS_KEY_ID` / `AWS_SECRET_ACCESS_KEY`\n   - GitHub -> `GITHUB_TOKEN`\n   - Stripe -> `STRIPE_SECRET_KEY`\n4. **Generate Unified Patch**: Use `patch-generator` to replace hardcoded strings with stand",
  "cost": {
    "context_tokens": 195
  }
}

Fetch it by URL: GET /api/v1/registry/masood-mashu-git-sentinel-secret-remediation/manifest?version=1.0.0