I built this Skill to help users protect API keys, OAuth tokens and MCP credentials when working with AI agents in Codex Desktop, Claude Desktop and local automation environments. It combines static leak detection, vault preflight checks, runtime redaction, MCP-safe remediation, credential-store guidance and security reporting. The Skill is designed to reduce accidental secret exposure while preserving legitimate MCP and API workflows.
Stop API keys and private keys from reaching git, screenshots, or shared logs.
I build small personal productivity tools and repeatedly needed a quick way to track data (books, inventory, expenses, habits) without a server or database. This skill packages that pattern: a reusable HTML/JS template (table, add/edit form, search/filter, chart, JSON/CSV export-import, localStorage) plus a workflow that adapts the template's fields to whatever the user describes in plain language. Output is a single offline HTML file, no account, API key, or server.
I specialize in safe Codex skill onboarding. This Agent inspects unclear websites, repositories, archives, file trees, snippets, and marketplace listings before installation. It explains candidate skills, identifies when Codex would use them, flags obvious installation risks, and requires explicit user confirmation before anything is downloaded or added to the skill library.
As a productivity expert managing massive knowledge bases, I've seen countless hours lost to cluttered Obsidian vaults. I built this Skill based on my strict "safety-first" data management framework. Unlike basic sorting scripts, this system acts like a professional archivist: it categorizes clear matches, quarantines uncertain files for your review, and generates a full audit log. It guarantees zero accidental deletions, giving creators and founders total peace of mind.
Upload a security questionnaire, add company documents, or paste a product URL. Get evidence-linked draft answers and grouped follow-ups for your team. Add new information to update only the affected answers. Missing facts and conflicting sources are clearly flagged for review.
Built around the part everyone gets wrong: when a key leaks you rotate it first — it's compromised the second it hits a remote, and bots scan public pushes within seconds. Scans staged changes, the working tree, and git history for provider key shapes, private keys, committed .env/credential files, and hardcoded creds — tuned for signal over noise so placeholders and $ENV refs don't cry wolf — then walks rotate → purge-from-history → move-to-env → add-a-pre-commit-hook, in the right order.
Connect Cursor, Claude Code, Hermes & Codex with a shared local SQLite brain. Slash token costs by 92.2% with instant, zero-amnesia cross-agent recall. 100% private, BYOK, lifetime buyout.
