Catch Secrets Before They're Committed: Meet the Env-Secrets-Scanner Skill

Accidentally committing secrets like API keys or .env files into git history is a common security mistake that is difficult to reverse. To solve this, Hermes AI introduces the env-secrets-scanner skill. This lightweight Python scanner operates without external dependencies or API calls to detect common secret patterns, including .pem, .key, and id_rsa files, as well as tokens from GitHub, Slack, Stripe, and AWS, catching these leaks before they reach the project repository.