env-secrets-hygiene - Audit repo secrets, fix env setup, and rotate leaked keys
Audits working tree and git history for leaked secrets, configures .env and .gitignore files, and guides key rotation.
Tags
Updated: 2026-09-18Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Scan working tree for leaked secrets
- Scan git history for leaked secrets
- Verify .env git ignore status
- Untrack .env from git index
- Create .env.example placeholder file
- Rewrite git history with confirmation
- Generate secrets audit report
Inputs
- Git repository
- Project source files
- User confirmation for history rewrite
Outputs
- Secrets audit report
- Updated .gitignore file
- Created .env.example file
- Untracked .env file status
Requirements
- git CLI tool
- grep command line utility
- git-filter-repo tool for history rewrite