registry / leash-secrets / 1.3.0

leash-secrets@1.3.0

Keep your secrets on a leash — AI agent skill that catches exposed API keys, tokens, and credentials before they hit your codebase

AI Security Review

scanned 2h ago · by lpm-firewall-ai

Review flagged AI-agent configuration or capability changes. This remains warn-only unless evidence shows foreign-agent hijack through preinstall/install/postinstall, hidden persistence, exfiltration, remote code execution, or other concrete malicious behavior.

Static reason

One or more suspicious static signals were detected.

Trigger

User manually runs `scripts/install.sh` or `scripts/install.ps1`.

Impact

Can alter local agent behavior and commit-time scanning after user invocation; remote branch changes affect fetched content.

Mechanism

Explicit AI-agent configuration and Git-hook installation with remote content fetch.

Rationale

Source behavior is package-aligned secret scanning, but the optional installer has real, broad agent-control mutation and mutable remote-content risk. This warrants a warning rather than a block.

Evidence

package.jsonsrc/scanner.jsbin/leash-secrets.jsscripts/install.shscripts/install.ps1hooks/pre-commit.shpatterns/crypto.jsonAGENTS.md.cursor/rules/leash-secrets.mdc.github/copilot-instructions.mdskills/leash-secrets.md

Network endpoints2

raw.githubusercontent.com/FasterApiWeb/leash-secrets/maingithub.com/FasterApiWeb/leash-secrets

Decision evidence

public snapshot

AI called this Suspicious at 89.0% confidence as Dangerous Capability with low false-positive risk.

Evidence for warning

`scripts/install.sh` explicitly writes AI-agent rules and a Git pre-commit hook.
`scripts/install.sh` downloads mutable `main` branch content before writing those files.
`scripts/install.ps1` explicitly writes Cursor, Claude, and Copilot instruction files.

Evidence against

`package.json` has no preinstall/install/postinstall hook; only `prepublishOnly` runs tests.
`src/scanner.js` only reads user-selected files and matches local JSON regex patterns.
`bin/leash-secrets.js` exposes explicit scan/report/validate commands with no network client.
No credential exfiltration, remote code execution, eval, or hidden import-time mutation found.
`patterns/crypto.json` contains detection regexes, not a private key or credential.

Behavioral surface

Source

ChildProcessFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 10 file(s), 24.5 KB of source

Source & flagged code

8 flagged

patterns/crypto.jsonView file

Lines 1-70json

2 "provider": "crypto",

3 "display_name": "Cryptographic Material & Private Keys",

4 "patterns": [

5 {

6 "id": "rsa-private-key",

7 "name": "RSA Private Key",

8 "severity": "critical",

9 "regex": "-----BEGIN RSA PRIVATE KEY-----",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

patterns/crypto.jsonView on unpkg · L9

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L9

10 "description": "RSA private key in PEM format",

11 "risk": "Can impersonate the key owner, decrypt data, sign documents. If used for SSH, grants server access.",

12 "fix": "Never commit private keys. Use SSH agent, secret manager, or mount at runtime."

13 },

14 {

15 "id": "openssh-private-key",

16 "name": "OpenSSH Private Key",

17 "severity": "critical",

18 "regex": "-----BEGIN OPENSSH PRIVATE KEY-----",

Critical

Secret Pattern

OpenSSH private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L18

19 "description": "OpenSSH private key (Ed25519, ECDSA, or RSA)",

20 "risk": "Grants SSH access to any server that has the corresponding public key in authorized_keys.",

21 "fix": "Use SSH agent forwarding. Never commit SSH keys to a repository."

22 },

23 {

24 "id": "ec-private-key",

25 "name": "EC Private Key",

26 "severity": "critical",

27 "regex": "-----BEGIN EC PRIVATE KEY-----",

Critical

Secret Pattern

EC private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L27

28 "description": "Elliptic Curve private key in PEM format",

29 "risk": "Can sign data, authenticate, and decrypt EC-encrypted content.",

30 "fix": "Use a secret manager or mount the key at runtime."

31 },

32 {

33 "id": "dsa-private-key",

34 "name": "DSA Private Key",

35 "severity": "critical",

36 "regex": "-----BEGIN DSA PRIVATE KEY-----",

37 "description": "DSA private key in PEM format (deprecated algorithm)",

38 "risk": "Can sign data and authenticate. DSA is deprecated — migrate to Ed25519.",

39 "fix": "Remove and rotate. Migrate to Ed25519 keys."

40 },

41 {

42 "id": "pgp-private-key-block",

43 "name": "PGP Private Key Block",

44 "severity": "critical",

45 "regex": "-----BEGIN PGP PRIVATE KEY BLOCK-----",

46 "description": "PGP/GPG private key block",

47 "risk": "Can decrypt PGP-encrypted data and sign messages as the key owner.",

48 "fix": "Use GPG agent. Never store private keys in repositories."

49 },

50 {

51 "id": "generic-private-key",

52 "name": "Generic Private Key",

53 "severity": "critical",

54 "regex": "-----BEGIN PRIVATE KEY-----",

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L54

55 "description": "PKCS#8 private key in PEM format",

56 "risk": "Generic private key — risk depends on what it's used for (TLS, signing, auth).",

57 "fix": "Use a certificate manager (ACM, Let's Encrypt auto-renewal) or secret vault."

58 },

59 {

60 "id": "pkcs12-password",

61 "name": "PKCS12/PFX Password",

62 "severity": "warning",

63 "regex": "(?i)(?:pkcs12|pfx|p12).*(?:password|pass|passphrase)\\s*[=:]\\s*['\"]?[^\\s'\"]+['\"]?",

64 "description": "Password for a PKCS12/PFX certificate bundle",

65 "risk": "Can unlock the certificate bundle and extract the private key.",

66 "fix": "Store the password in a secret manager, reference by environment variable."

67 }

68 ]

69}

hooks/pre-commit.shView file

•path = hooks/pre-commit.sh kind = build_helper sizeBytes = 4548 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/pre-commit.shView on unpkg

patterns/aws.jsonView file

Lines 1-34json

2 "provider": "aws",

3 "display_name": "Amazon Web Services",

4 "patterns": [

5 {

6 "id": "aws-access-key-id",

7 "name": "AWS Access Key ID",

8 "severity"

README.mdView file

Lines 103-143markdown

103Type: OpenAI Project API Key

104File: .env:3

105Value: sk-pro....Q7xR

106Risk: Access to OpenAI API. Attacker can run models

107 and incur significant charges on your account.

108━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

109FIX: .env should NEVER be committed.

110 1. Add .env to .gitignore

111 2. Remove from git: git rm --cached .env

112 3. Rotate the key: https://platform.openai.com/api-keys

113━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

114

Source & flagged code

8 flagged · loading source

patterns/crypto.jsonView file

9patternName = private_key_rsa severity = critical line = 9 matchedText = "regex":...--",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

patterns/crypto.jsonView on unpkg · L9

9patternName = private_key_rsa severity = critical line = 9 matchedText = "regex":...--",

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L9

18patternName = private_key_openssh severity = critical line = 18 matchedText = "regex":...--",

Critical

Secret Pattern

OpenSSH private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L18

27patternName = private_key_ec severity = critical line = 27 matchedText = "regex":...--",

Critical

Secret Pattern

EC private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L27

54patternName = private_key_rsa severity = critical line = 54 matchedText = "regex":...--",

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L54

hooks/pre-commit.shView file

•path = hooks/pre-commit.sh kind = build_helper sizeBytes = 4548 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/pre-commit.shView on unpkg

patterns/aws.jsonView file

14patternName = aws_access_key severity = critical line = 14 matchedText = "false_p...LE"]

Critical

Secret Pattern

AWS access key ID in patterns/aws.json

patterns/aws.jsonView on unpkg · L14

README.mdView file

123patternName = private_key_openssh severity = critical line = 123 matchedText = Value: ...----

Critical

Secret Pattern

OpenSSH private key in README.md

README.mdView on unpkg · L123

Findings

7 Critical1 Medium3 Low

CriticalCritical Secretpatterns/crypto.json

CriticalSecret Patternpatterns/crypto.json

CriticalSecret Patternpatterns/aws.json

CriticalSecret PatternREADME.md

MediumShips Build Helperhooks/pre-commit.sh

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

Source & flagged code

8 flagged

patterns/crypto.jsonView file

Lines 1-70json

2 "provider": "crypto",

3 "display_name": "Cryptographic Material & Private Keys",

4 "patterns": [

5 {

6 "id": "rsa-private-key",

7 "name": "RSA Private Key",

8 "severity": "critical",

9 "regex": "-----BEGIN RSA PRIVATE KEY-----",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

patterns/crypto.jsonView on unpkg · L9

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L9

10 "description": "RSA private key in PEM format",

11 "risk": "Can impersonate the key owner, decrypt data, sign documents. If used for SSH, grants server access.",

12 "fix": "Never commit private keys. Use SSH agent, secret manager, or mount at runtime."

13 },

14 {

15 "id": "openssh-private-key",

16 "name": "OpenSSH Private Key",

17 "severity": "critical",

18 "regex": "-----BEGIN OPENSSH PRIVATE KEY-----",

Critical

Secret Pattern

OpenSSH private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L18

19 "description": "OpenSSH private key (Ed25519, ECDSA, or RSA)",

20 "risk": "Grants SSH access to any server that has the corresponding public key in authorized_keys.",

21 "fix": "Use SSH agent forwarding. Never commit SSH keys to a repository."

22 },

23 {

24 "id": "ec-private-key",

25 "name": "EC Private Key",

26 "severity": "critical",

27 "regex": "-----BEGIN EC PRIVATE KEY-----",

Critical

Secret Pattern

EC private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L27

28 "description": "Elliptic Curve private key in PEM format",

29 "risk": "Can sign data, authenticate, and decrypt EC-encrypted content.",

30 "fix": "Use a secret manager or mount the key at runtime."

31 },

32 {

33 "id": "dsa-private-key",

34 "name": "DSA Private Key",

35 "severity": "critical",

36 "regex": "-----BEGIN DSA PRIVATE KEY-----",

37 "description": "DSA private key in PEM format (deprecated algorithm)",

38 "risk": "Can sign data and authenticate. DSA is deprecated — migrate to Ed25519.",

39 "fix": "Remove and rotate. Migrate to Ed25519 keys."

40 },

41 {

42 "id": "pgp-private-key-block",

43 "name": "PGP Private Key Block",

44 "severity": "critical",

45 "regex": "-----BEGIN PGP PRIVATE KEY BLOCK-----",

46 "description": "PGP/GPG private key block",

47 "risk": "Can decrypt PGP-encrypted data and sign messages as the key owner.",

48 "fix": "Use GPG agent. Never store private keys in repositories."

49 },

50 {

51 "id": "generic-private-key",

52 "name": "Generic Private Key",

53 "severity": "critical",

54 "regex": "-----BEGIN PRIVATE KEY-----",

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L54

55 "description": "PKCS#8 private key in PEM format",

56 "risk": "Generic private key — risk depends on what it's used for (TLS, signing, auth).",

57 "fix": "Use a certificate manager (ACM, Let's Encrypt auto-renewal) or secret vault."

58 },

59 {

60 "id": "pkcs12-password",

61 "name": "PKCS12/PFX Password",

62 "severity": "warning",

63 "regex": "(?i)(?:pkcs12|pfx|p12).*(?:password|pass|passphrase)\\s*[=:]\\s*['\"]?[^\\s'\"]+['\"]?",

64 "description": "Password for a PKCS12/PFX certificate bundle",

65 "risk": "Can unlock the certificate bundle and extract the private key.",

66 "fix": "Store the password in a secret manager, reference by environment variable."

67 }

68 ]

69}

hooks/pre-commit.shView file

•path = hooks/pre-commit.sh kind = build_helper sizeBytes = 4548 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/pre-commit.shView on unpkg

patterns/aws.jsonView file

Lines 1-34json

2 "provider": "aws",

3 "display_name": "Amazon Web Services",

4 "patterns": [

5 {

6 "id": "aws-access-key-id",

7 "name": "AWS Access Key ID",

8 "severity"

README.mdView file

Lines 103-143markdown

103Type: OpenAI Project API Key

104File: .env:3

105Value: sk-pro....Q7xR

106Risk: Access to OpenAI API. Attacker can run models

107 and incur significant charges on your account.

108━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

109FIX: .env should NEVER be committed.

110 1. Add .env to .gitignore

111 2. Remove from git: git rm --cached .env

112 3. Rotate the key: https://platform.openai.com/api-keys

113━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

114