Skip to main content

Secret Scanner Pack

★Trusted◇Sandbox optionalv1.0.0MIT✔Verified80

by AgentNode · published 5 months ago · toolpack

Detect hardcoded secrets, API keys, and credentials in code.

Scan codebases for accidentally committed secrets, API keys, passwords, tokens, and private keys. Uses pattern matching and entropy analysis.

langchaincrewaigeneric

Quick Start

bash
agentnode install secret-scanner-pack

Runs in a subprocess with filtered environment by default. Declared permissions are policy-checked, not sandboxed.

Usage

From package
python
from secret_scanner_pack.tool import run

result = run(
    action="scan_secrets",
    path="/workspace/my-project",
    recursive=True,
    exclude_patterns=["*.test.js", "node_modules/**", "__pycache__/**"]
)

print(f"Files scanned: {result['files_scanned']}")
print(f"Secrets found: {result['total_findings']}")
print(f"Severity breakdown: {result['severity_counts']}")

for finding in result["findings"]:
    print(f"\n[{finding['severity'].upper()}] {finding['type']}")
    print(f"  File: {finding['file']}:{finding['line']}")
    print(f"  Match: {finding['redacted_match']}")
    print(f"  Rule: {finding['rule_id']}")

Runs locally on your machine. No execution data is sent to AgentNode. Permissions are checked before execution. Learn how this works

Verification

high confidence80/100✔ Verified
smokeReturned valid result
+25/25
testsTests failed
0/15
importAll tools imported successfully
+15/15
installInstalled in 1.5s
+15/15
contractAll contract checks passed
+10/10
determinismConsistent output across runs (normalized)
+5/5
reliability3/3 runs passed
+10/10

Package installs and imports correctly. runtime checks passed.

✔install1.5s
✔import62ms
✔smoke107ms
✖tests1.1s

This package was executed and validated by AgentNode before listing. Install, import, and runtime checks passed.

Verified in cases_real mode

Python 3.12.3ffmpegpopplertesseractuv

Last verified 27d ago· Runner v2.0.0

Use this when you need to...

  • ›Scan a codebase for accidentally committed AWS access keys
  • ›Detect hardcoded database connection strings in configuration files
  • ›Audit pull request diffs for leaked API tokens before merging
  • ›Find private SSH keys and certificates checked into repositories
  • ›Generate a compliance report of all detected credential exposures

README

Version History

v1.0.0latestverified
3/16/2026

Capabilities

secret_scanningscan_secretstool

Permissions

◇Sandbox optionalFrom a trusted publisher — runs on the host by default. You can require isolation with sandbox.host_trust_policy.

Declared by the publisher. Checked before execution by the policy gate.

Networknone
Filesystemworkspace_read
Code Executionnone
Data Accessinput_only
User Approvalnever

Permissions are policy-checked before execution. For trusted and curated packages that run on the host, network and filesystem access are policy-checked but not OS-sandboxed. When runtime isolation is required for untrusted/community code, AgentNode uses sandbox-or-fail-closed if the required container runtime and pinned image are available. Learn more

Privacy

All tool execution happens locally on your machine. AgentNode never receives:

  • • Tool inputs or outputs
  • • Execution logs
  • • Data your agent processes

Only install events and search queries are sent to the registry.

bash
agentnode install secret-scanner-pack

Files (3)

License

MIT

Stats

Downloads0
Installs0
Versionv1.0.0
Published3/16/2026
Channelstable
Typetoolpack
Entrypointsecret_scanner_pack.tool

Compatibility

Frameworks

langchaincrewaigeneric

Runtime

python

Python Version

>=3.10

Trust & Security

Publisher★Trusted
SignatureNone
ProvenanceNone
Security Issues0

Publisher

A

AgentNode

@agentnode

Report an issue with this package