Git Security Scanner & Repo Health Auditor — entropy-based secret detection, composite health scoring, commit quality analysis, stale branch cleanup, and dep...
数据分析
Gitguard Skill
试用Git Security Scanner & Repo Health Auditor — entropy-based secret detection, composite health scoring, commit quality analysis, stale branch cleanup, and dep...
它能做什么
Git Security Scanner & Repo Health Auditor — entropy-based secret detection, composite health scoring, commit quality analysis, stale branch cleanup, and dependency freshness checks across all your local repos. Local-first, no data leaves your machine except optional GitHub API reads.
技能文档
GitGuard — Repo Intelligence for AI Agents
Give an agent the ability to audit, score, and triage your own Git repositories: exposed secrets, branch hygiene, commit quality, stale dependencies, and GitHub PR/issue backlog — all from local git data plus optional public GitHub API reads.
🔒 Scope and safety notice — GitGuard only reads files and git metadata already on your local disk in the repository you point it at. Secret scan findings are always returned as redacted previews (first/last 4 characters only); raw secret values are never stored, logged, or transmitted. The only network calls this skill makes are read-only lookups against the public npm/PyPI registries (dependency freshness) and the GitHub REST API (PR/issue triage, optional token) — no data about your code or secrets is ever sent anywhere.
What This Skill Does
- Secret scanning — Shannon-entropy analysis plus known credential
patterns (AWS keys, GitHub tokens, private key headers, Stripe/Slack
keys, generic
key=/secret=assignments) to catch exposed credentials before you push. - Composite health score — a single 0-100 grade (A-F) blending secret safety, commit hygiene, branch hygiene, dependency freshness, and recent activity, so you know which of your repos needs attention first.
- Commit quality analysis — Conventional Commits compliance, subject length, imperative mood, and body presence, scored per commit.
- Stale branch detection — flags merged-but-not-deleted branches, long-abandoned branches, and branches badly diverged from main, with a keep/review/delete/merge recommendation for each.
- Dependency freshness — checks
package.jsonandrequirements.txtagainst live npm/PyPI registries. - GitHub PR/issue triage — pulls open PRs and issues via the GitHub API and flags which have gone stale.
When To Use This Skill
Use this when a user wants to audit one or more of their own Git repositories: checking for accidentally committed secrets before a push, getting an overview of repo health across many projects, cleaning up stale branches, or triaging a GitHub backlog. This is a defensive, local-first tool for maintaining your own code — it is not a scanning or reconnaissance tool for third-party targets.
Endpoint
MCP Server: https://github.com/welove111/gitguard-skill/.netlify/functions/mcp
POST a JSON body like {"tool": "health_report", "repo_path": "."}.
Available Tools
| Tool | Description |
|---|---|
scan_secrets | Entropy + pattern-based secret scan of a repo |
health_report | Composite 0-100 health score for one repo |
multi_repo_dashboard | Rank many local repos by health score |
commit_quality | Conventional Commits compliance scoring |
stale_branches | Branch staleness + keep/review/delete recommendation |
dependency_check | npm/PyPI freshness check |
github_triage | Open PR/issue staleness via GitHub API |
Requirements
- Python 3.9+
gitCLI available on PATHrequests(optional — only needed for dependency/GitHub checks; secret scanning and commit/branch analysis work fully offline without it)GITHUB_TOKENenvironment variable (optional — raises GitHub API rate limits from 60/hour to 5,000/hour; not required for public repos)
Support
GitGuard is free and open source. If it saved you time or caught something useful, the project accepts voluntary support:
- Website: https://btc-vision.org
- BTC:
bc1qtpuhwl0vnhrch5p7e5469q2ed66hlyyvh8rtsn - ETH:
0xf03b429d4d85896a46dd7a64b5a8ab9f0bbb4ced - SOL:
3G5UZHFYN8hbv3aTZt6Lr7qqx4FTTkAyLJq34HjQLraz - Lightning:
welove@blink.sv
Links
- GitHub: https://github.com/welove111/gitguard-skill
- Website: https://btc-vision.org
相关技能
Smart Git workflows and secret scanning
Scan skills in a project directory for security issues and generate a markdown table report, then install skills from a local registry. Combines static analysis of code and markdown files with supply chain checks. Use when auditing a skills directory, generating a security summary table, or installi
Use when asked to security-audit a repository, find vulnerabilities to fix, check for leaked secrets, review dependencies for known CVEs, or harden a project...
Security scanner for AI agent skills. Detects hardcoded secrets, unsafe code execution, prompt injection, and malware patterns in under 50ms. Scan before you...
Automated security audit for AI agent skills. Use BEFORE installing any skill from ClawHub, GitHub, or other sources. Scans SKILL.md + all files for 30+ red...
作者 Zoran2 次安装