ghost-scan-secrets
ghostsecurityFind leaked secrets before they become incidents.
secrets scanning
What it does
Scans a codebase for leaked credentials and reports confirmed risks with remediation guidance.
When to use it
Use when checking code for leaked secrets, credentials, hardcoded keys, passwords, exposed environment values, or sensitive data.
How to use it
Give it a codebase; it scans for secret candidates, analyzes them, and writes findings and a summary report.
What you provide
- An existing project
Uses
Access · 3
This skill
GitHub Releases
Downloads poltergeist from GitHub
poltergeist install script
A remote install script
~/.ghost/repos/<repo_id>/cache/repo.md
Reads cached repository context
Good to know
- starts 1 helper agents
- starts one helper agent per item, so the count depends on the work
What you need · 2
Requires the poltergeist binary, which the workflow installs automatically.
Supports Linux and macOS on amd64 or arm64, and Windows amd64 through Git Bash, WSL, or MSYS2.
About this skill
- Visibility
- Public
- Repository
- ghostsecurity/skills
- Created
- Oct 8, 2026
- Updated
- Oct 8, 2026
- Files
- 9