Secret Exposure Gate

This skill appears to be what it says: a local, read-only preflight scanner implemented in a Python script and templates. Before installing/using it: (1) Only run it against directories you expect it to read — it will open and scan text files under the provided path. (2) The script masks long-looking secrets matched by the 'secret_like' regex, but other matches (private URLs, command snippets) may be shown verbatim or partially; avoid pointing it at production secrets you cannot re-share. (3) Review and, if needed, extend the redaction rules (e.g., mask full URLs or additional secret patterns) and test on a non-sensitive sample. (4) Use --dry-run and inspect output locally; do not pipe results to external services without redaction. If the script ever attempts network access, asks for credentials, or an install spec appears that downloads code from an external URL, re-evaluate (those would change the assessment).