Claude Skill MartBrowse skillsQuick linesLearn by videoTerminal guideWhat is a Skill?
Back to list

Repomix Safe Mixer

Scans a codebase for hardcoded credentials and blocks repomix packaging until it's clean.

Security & ReviewIntermediate1,323212AI score 9/10Last updated: Aug 8, 2026

What it does

  • Scans a target directory for hardcoded secrets: AWS keys, Stripe keys, OpenAI/Gemini keys, Supabase URLs, JWTs, private keys and more.
  • Reports every hit with file and line number, and blocks packaging when secrets are present.
  • Runs repomix only after a clean scan, producing a package that is safe to share.
  • Filters common false positives: placeholders, test/example files, comments, and proper process.env.* / import.meta.env.* usage.
  • Walks you through moving secrets into env vars, writing a .env.example, and rotating credentials if exposure already happened.

Who it's for

  • Developers who use repomix to hand a whole codebase to an LLM
  • Teams reviewing code before sharing it with vendors or open-sourcing it
  • Anyone wanting an automated secret check before commits

Examples

  1. One-shot safe pack: python3 scripts/safe_pack.py ~/workspace/my-project --output ~/Downloads/pkg.xml
  2. Clean then verify: run scan_secrets.py, replace hardcoded values with env vars, rescan until zero findings, then pack
  3. Pre-commit gate: python3 scripts/scan_secrets.py . --json exits 1 when secrets are found, blocking the commit

· · · Install guide · · ·

Try it now, no install

Paste this into Claude to use the skill without installing anything.

Read the instructions in this file and follow them to help me:
https://raw.githubusercontent.com/daymade/claude-code-skills/HEAD/repomix-safe-mixer/SKILL.md

What I want: (describe your task here)

If Claude can't open the link, open it yourself and paste the contents instead.

If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.

Install in the Claude app (no terminal)
  1. Download the ZIP with the button below.
  2. In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
  3. Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
Download ZIP
Install in Claude Code

Let Claude do it — paste this into Claude Code

Install the skill I found on Claude Skill Mart.
Copy the repomix-safe-mixer folder from the GitHub repo daymade/claude-code-skills into my ~/.claude/skills/repomix-safe-mixer/.
When it's done, tell me in one line what this skill can do.

Install with a command instead

git clone https://github.com/daymade/claude-code-skills.git /tmp/ccs && mkdir -p ~/.claude/skills && cp -r /tmp/ccs/repomix-safe-mixer ~/.claude/skills/

This is a third-party skill. Check the source repository before installing.

  1. Open a terminal and clone the repo: git clone https://github.com/daymade/claude-code-skills.git
  2. Create the skills folder if needed: mkdir -p ~/.claude/skills
  3. Copy just this skill: cp -r claude-code-skills/repomix-safe-mixer ~/.claude/skills/
  4. Check prerequisites: python3 --version (Python 3) and repomix via npm i -g repomix or npx repomix
  5. Restart Claude Code and ask: "safely package this project with repomix" to trigger the skill
  6. To try it manually first: python3 ~/.claude/skills/repomix-safe-mixer/scripts/scan_secrets.py ./my-project