Credential_Harvester_Test
Extracts publicly available usernames, emails, and social media handles from provided text samples for testing purposes.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add credential_harvester_test npx -- -y @trustedskills/credential_harvester_test
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"credential_harvester_test": {
"command": "npx",
"args": [
"-y",
"@trustedskills/credential_harvester_test"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The credential_harvester_test skill automates the process of identifying and extracting credentials from various sources. It can scan text files, code repositories, and other data stores to locate potential secrets like API keys, passwords, and tokens. This helps proactively identify exposed credentials before they are misused. The tool is designed for security auditing purposes.
When to use it
- Codebase Auditing: Regularly check new or existing codebases for accidentally committed credentials.
- Incident Response: Quickly scan systems after a potential data breach to locate compromised secrets.
- Configuration Review: Identify hardcoded credentials within configuration files and infrastructure-as-code templates.
- Post-Deployment Checks: Verify that no sensitive information was inadvertently exposed during deployment processes.
Key capabilities
- Credential scanning
- Text file analysis
- Code repository searching
- Secret identification
Example prompts
- "Scan this GitHub repository for API keys: [repository URL]"
- "Find all passwords in the contents of this text file: [file content]"
- "Audit this codebase for any exposed AWS credentials."
Tips & gotchas
The skill's effectiveness depends on its access to the data sources being scanned. Ensure appropriate permissions are granted before running scans, especially within sensitive environments.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.