code-hardcode-audit
🎯Skillfrom terrylica/cc-skills
|Identifies and flags hardcoded sensitive information like passwords, API keys, and credentials in source code to improve security and prevent potential data leaks.
Installation
npx skills add https://github.com/terrylica/cc-skills --skill code-hardcode-auditSkill Details
Overview
# cc-skills
Claude Code Skills Marketplace: Meta-skills and foundational tools for Claude Code CLI.
[](#plugins)
[](./LICENSE)
Plugins
| Plugin | Description | Category |
| ------------------------------------------------------- | ------------------------------------------------------------------------------------------------------- | ------------ |
| [plugin-dev](./plugins/plugin-dev/) | Plugin development: skill architecture, validation, silent failure auditing, TodoWrite templates | development |
| [itp](./plugins/itp/) | Implement-The-Plan workflow: ADR-driven 4-phase development with preflight, implementation, and release | productivity |
| [gh-tools](./plugins/gh-tools/) | GitHub workflow automation with intelligent GFM link validation for PRs | development |
| [link-tools](./plugins/link-tools/) | Comprehensive link validation: portability checks, lychee broken link detection, path policy linting | quality |
| [devops-tools](./plugins/devops-tools/) | Doppler credentials, Firecrawl self-hosted, ML pipelines, Telegram bot, MLflow, session recovery | devops |
| [dotfiles-tools](./plugins/dotfiles-tools/) | Chezmoi dotfile management via natural language workflows | utilities |
| [doc-tools](./plugins/doc-tools/) | Comprehensive documentation: ASCII diagrams, markdown standards, LaTeX build, Pandoc PDF | documents |
| [quality-tools](./plugins/quality-tools/) | Code clone detection, multi-agent E2E validation, performance profiling, schema testing | quality |
| [productivity-tools](./plugins/productivity-tools/) | Slash command generation for Claude Code | productivity |
| [mql5](./plugins/mql5/) | MQL5 development: indicator patterns, mql5.com article extraction, Python workspace | trading |
| [itp-hooks](./plugins/itp-hooks/) | ITP workflow enforcement: ASCII art blocking, graph-easy reminders, Ruff linting | enforcement |
| [alpha-forge-worktree](./plugins/alpha-forge-worktree/) | Git worktree management for alpha-forge with ADR-style naming and dynamic iTerm2 tab detection | development |
| [ralph](./plugins/ralph/) | Autonomous AI orchestration with Ralph Wiggum technique - keeps AI in loop until task complete | automation |
| [iterm2-layout-config](./plugins/iterm2-layout-config/) | iTerm2 workspace layout configuration with TOML-based separation of private paths from publishable code | development |
| [statusline-tools](./plugins/statusline-tools/) | Custom status line with git status, link validation (L), and path linting (P) indicators | utilities |
| [notion-api](./plugins/notion-api/) | Notion API integration using notion-client Python SDK with preflight credential prompting | productivity |
| [asciinema-tools](./plugins/asciinema-tools/) | Terminal recording automation: asciinema capture, launchd daemon, Keychain PAT storage | utilities |
| [git-town-workflow](./plugins/git-town-workflow/) | Prescriptive git-town workflow enforcement for fork-based development | devops |
Installation
Prerequisites
| Requirement | Check | Install
More from this repository10
slash-command-factory skill from terrylica/cc-skills
Automates semantic versioning and release management by generating changelog, bumping version, and publishing releases based on commit messages.
Validates links across documentation and repositories, checking for broken, inaccessible, or non-compliant URLs using comprehensive link checking techniques.
Comprehensive link validation: portability checks, lychee broken link detection, path policy linting
Evaluates and generates performance metrics for range bar trading indicators, likely providing statistical analysis and visualization of trading strategy effectiveness.
I apologize, but I cannot confidently infer the specific functionality of the "log-reader" skill from the provided README. The README does not mention "log-reader" or provide details about its purp...
Retrieves and manages PyPI package credentials securely using Doppler for seamless dependency and authentication management in Python projects.
Validates hyperlinks for broken references, portability, and adherence to path policies across documentation and project files.
DevOps automation: ClickHouse, Doppler, Telegram, MLflow, notifications, session recovery
GitHub workflow automation: GFM link validation, WebFetch enforcement (use gh CLI instead)