Repomix Safe Mixer
Scans a codebase for hardcoded credentials and blocks repomix packaging until it's clean.
Security & ReviewIntermediate★ 1,323⑂ 212AI score 9/10Last updated: Aug 8, 2026
What it does
- Scans a target directory for hardcoded secrets: AWS keys, Stripe keys, OpenAI/Gemini keys, Supabase URLs, JWTs, private keys and more.
- Reports every hit with file and line number, and blocks packaging when secrets are present.
- Runs repomix only after a clean scan, producing a package that is safe to share.
- Filters common false positives: placeholders, test/example files, comments, and proper
process.env.*/import.meta.env.*usage. - Walks you through moving secrets into env vars, writing a
.env.example, and rotating credentials if exposure already happened.
Who it's for
- Developers who use repomix to hand a whole codebase to an LLM
- Teams reviewing code before sharing it with vendors or open-sourcing it
- Anyone wanting an automated secret check before commits
Examples
- One-shot safe pack:
python3 scripts/safe_pack.py ~/workspace/my-project --output ~/Downloads/pkg.xml - Clean then verify: run
scan_secrets.py, replace hardcoded values with env vars, rescan until zero findings, then pack - Pre-commit gate:
python3 scripts/scan_secrets.py . --jsonexits 1 when secrets are found, blocking the commit
· · · Install guide · · ·
Try it now, no install
Paste this into Claude to use the skill without installing anything.
Read the instructions in this file and follow them to help me: https://raw.githubusercontent.com/daymade/claude-code-skills/HEAD/repomix-safe-mixer/SKILL.md What I want: (describe your task here)
If Claude can't open the link, open it yourself and paste the contents instead.
↓ If it works for you, download the ZIP below and install it. Then it runs on its own — no pasting each time.
Install in the Claude app (no terminal)
- Download the ZIP with the button below.
- In Claude, open Settings → Capabilities and turn on 'Code execution and file creation'. (one time)
- Go to Customize → Skills → + → 'Upload a skill' and upload the ZIP.
Install in Claude Code
Let Claude do it — paste this into Claude Code
Install the skill I found on Claude Skill Mart. Copy the repomix-safe-mixer folder from the GitHub repo daymade/claude-code-skills into my ~/.claude/skills/repomix-safe-mixer/. When it's done, tell me in one line what this skill can do.
Install with a command instead
git clone https://github.com/daymade/claude-code-skills.git /tmp/ccs && mkdir -p ~/.claude/skills && cp -r /tmp/ccs/repomix-safe-mixer ~/.claude/skills/⚠ This is a third-party skill. Check the source repository before installing.
- Open a terminal and clone the repo:
git clone https://github.com/daymade/claude-code-skills.git - Create the skills folder if needed:
mkdir -p ~/.claude/skills - Copy just this skill:
cp -r claude-code-skills/repomix-safe-mixer ~/.claude/skills/ - Check prerequisites:
python3 --version(Python 3) and repomix vianpm i -g repomixornpx repomix - Restart Claude Code and ask: "safely package this project with repomix" to trigger the skill
- To try it manually first:
python3 ~/.claude/skills/repomix-safe-mixer/scripts/scan_secrets.py ./my-project
View source on GitHub ↗License: MIT