Claude Skill MartBrowse skillsWhat is a Skill?
 
← Back to list

Repomix Safe Mixer

Scans your codebase for hardcoded credentials and blocks repomix packaging until it is clean.

Security & ReviewIntermediate★ 1,323⑂ 212AI score 9/10Last updated: Aug 8, 2026

What it does

  • Scans a project directory for hardcoded API keys, database credentials, JWTs and private keys.
  • Reports every finding with file path and line number, and blocks packaging when secrets exist.
  • Runs repomix only after a clean scan, producing a package that is safe to share or hand to an LLM.
  • Recognizes common patterns: AWS AKIA..., Stripe sk_live_..., OpenAI sk-..., Google AIza..., Supabase URLs/anon keys, Cloudflare R2, OAuth secrets, Turnstile keys.
  • Filters out false positives such as your-api-key placeholders, process.env.X references, test/example files and comments; --exclude lets you add your own patterns.
  • Includes remediation guidance: move secrets to env vars, ship a .env.example, and a post-exposure checklist (rotate, revoke, audit, monitor).

Who it's for

  • Developers who regularly use repomix to bundle a whole repo for LLM context or distribution.
  • Teams preparing a private project for open-source release.
  • Anyone wanting a lightweight pre-commit secret check.
  • Maintainers cleaning up legacy hardcoded credentials.

Examples

  1. One-shot safe pack: python3 scripts/safe_pack.py ~/workspace/my-project --output ~/Downloads/my-project.xml — packs only if the scan is clean.
  2. Clean then verify: the scan flags a Supabase URL at src/client.ts:5; replace it with import.meta.env.VITE_SUPABASE_URL, add .env.example, re-run scan_secrets.py to confirm.
  3. Pre-commit gate: run python3 scripts/scan_secrets.py . --json in a git hook; exit code 1 blocks the commit when secrets are detected.

· · · Install guide · · ·

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
↓ Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the repomix-safe-mixer folder from the GitHub repo daymade/claude-code-skills into my ~/.claude/skills/repomix-safe-mixer/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/daymade/claude-code-skills.git /tmp/claude-code-skills && mkdir -p ~/.claude/skills && cp -r /tmp/claude-code-skills/repomix-safe-mixer ~/.claude/skills/

⚠ This is a third-party skill. Check the source repository before installing.

  1. Prerequisites: Python 3 and repomix. Check with python3 --version, and install repomix via npm install -g repomix.
  2. Clone the repo: git clone https://github.com/daymade/claude-code-skills.git
  3. Create the skills folder: mkdir -p ~/.claude/skills
  4. Copy the skill: cp -r claude-code-skills/repomix-safe-mixer ~/.claude/skills/
  5. Verify: ls ~/.claude/skills/repomix-safe-mixer should show SKILL.md, scripts/ and references/.
  6. Restart Claude Code, then ask something like "safely package this project with repomix" to trigger the skill.
  7. Optional direct use: python3 ~/.claude/skills/repomix-safe-mixer/scripts/scan_secrets.py ./my-project
View source on GitHub ↗License: MIT