Hidden Folder Audit
Scans hidden folders for sensitive data like credentials, API keys, and personally identifiable information.
Install on your platform
We auto-selected Claude Code based on this skill’s supported platforms.
Run in terminal (recommended)
claude mcp add hidden-folder-audit npx -- -y @trustedskills/hidden-folder-audit
Or manually add to ~/.claude/settings.json
{
"mcpServers": {
"hidden-folder-audit": {
"command": "npx",
"args": [
"-y",
"@trustedskills/hidden-folder-audit"
]
}
}
}Requires Claude Code (claude CLI). Run claude --version to verify your install.
About This Skill
What it does
The hidden-folder-audit skill identifies and reports on hidden folders within a specified directory. It can detect files or directories that are intentionally concealed, potentially revealing sensitive data or unwanted configurations. The audit provides a detailed list of these hidden items, including their names and paths, aiding in security assessments and system cleanup.
When to use it
- Security Audits: To proactively identify potential vulnerabilities arising from unintentionally exposed hidden files.
- System Cleanup: To remove or investigate hidden folders that may be cluttering a workspace or consuming unnecessary space.
- Configuration Review: To ensure no sensitive configuration files are inadvertently hidden within a directory structure.
- Workspace Hygiene: As part of a routine maintenance process to maintain a clean and organized development environment.
Key capabilities
- Hidden file/folder detection
- Detailed reporting (name, path)
- Directory specification
Example prompts
- "Audit the hidden folders in
/home/user/documents." - "Find all hidden files within my project directory."
- "Show me a list of any hidden directories under
/opt/app/config."
Tips & gotchas
The skill requires appropriate permissions to access and list the contents of the specified directory. Be mindful of potential false positives – some files might be hidden for legitimate reasons, requiring careful review of the audit results.
Tags
TrustedSkills Verification
Unlike other registries that point to live repositories, TrustedSkills pins every skill to a verified commit hash. This protects you from malicious updates — what you install today is exactly what was reviewed and verified.
Security Audits
| Gen Agent Trust Hub | Pass |
| Socket | Pass |
| Snyk | Pass |
🌐 Community
Passed automated security scans.