registry / leash-secrets / 1.2.1

leash-secrets@1.2.1

Keep your secrets on a leash — AI agent skill that catches exposed API keys, tokens, and credentials before they hit your codebase

AI Security Review

scanned 2d ago · by lpm-firewall-ai

No confirmed malicious npm attack surface. The package provides a local secret scanner and optional user-run installers for agent rules/hooks.

Static reason

One or more suspicious static signals were detected.

Trigger

User invokes CLI/API scan or explicitly runs scripts/install.sh or scripts/install.ps1

Impact

May read target files during scans and may write agent rule/hook files only through explicit installer commands; no install-time mutation or exfiltration found.

Mechanism

Local secret-pattern scanning plus optional agent rule/pre-commit setup

Rationale

Static inspection shows a package-aligned secret scanner with explicit user-command setup for agent rules and git hooks, but no npm lifecycle install mutation, credential harvesting beyond user-requested local scanning, exfiltration, or remote payload execution. The scanner hint on patterns/crypto.json is a false positive caused by detection regex strings for private-key headers.

Evidence

package.jsonbin/leash-secrets.jssrc/loader.jssrc/scanner.jssrc/reporter.jsscripts/install.shscripts/install.ps1AGENTS.mdskills/leash-secrets.mdpatterns/crypto.jsonhooks/pre-commit.shhooks/hooks.json$HOME/.cursor/rules/leash-secrets.mdc$HOME/.claude/skills/leash-secrets.md$HOME/.codex/AGENTS.md.github/copilot-instructions.md.windsurf/rules/leash-secrets.md.clinerules/leash-secrets.md.git/hooks/pre-commit-leash-secrets.git/hooks/pre-commit

Network endpoints2

raw.githubusercontent.com/FasterApiWeb/leash-secrets/maingithub.com/FasterApiWeb/leash-secrets

Decision evidence

public snapshot

AI called this Clean at 93.0% confidence as Benign with low false-positive risk.

Evidence for block

Installer writes agent config/rule files when explicitly run, including $HOME/.codex/AGENTS.md and .cursor/.claude paths.

Evidence against

No npm preinstall/install/postinstall; package.json only has prepublishOnly for publisher-side tests.
CLI and API perform local filesystem scanning/reporting and redact matches; no exfiltration code seen.
patterns/crypto.json contains regex signatures, not embedded private keys.
Network URLs are documentation/installer fetches from the package GitHub repo, not import-time or install-time callbacks.
Agent instructions are package-aligned secret-detection guidance, not prompt hijack for data theft or remote execution.

Behavioral surface

Source

ChildProcessFilesystem

Supply chainNo supply-chain packaging signals triggered.

ManifestNo manifest risk signals triggered.

scanned 10 file(s), 24.3 KB of source

Source & flagged code

8 flagged

patterns/crypto.jsonView file

Lines 1-70json

2 "provider": "crypto",

3 "display_name": "Cryptographic Material & Private Keys",

4 "patterns": [

5 {

6 "id": "rsa-private-key",

7 "name": "RSA Private Key",

8 "severity": "critical",

9 "regex": "-----BEGIN RSA PRIVATE KEY-----",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

patterns/crypto.jsonView on unpkg · L9

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L9

10 "description": "RSA private key in PEM format",

11 "risk": "Can impersonate the key owner, decrypt data, sign documents. If used for SSH, grants server access.",

12 "fix": "Never commit private keys. Use SSH agent, secret manager, or mount at runtime."

13 },

14 {

15 "id": "openssh-private-key",

16 "name": "OpenSSH Private Key",

17 "severity": "critical",

18 "regex": "-----BEGIN OPENSSH PRIVATE KEY-----",

Critical

Secret Pattern

OpenSSH private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L18

19 "description": "OpenSSH private key (Ed25519, ECDSA, or RSA)",

20 "risk": "Grants SSH access to any server that has the corresponding public key in authorized_keys.",

21 "fix": "Use SSH agent forwarding. Never commit SSH keys to a repository."

22 },

23 {

24 "id": "ec-private-key",

25 "name": "EC Private Key",

26 "severity": "critical",

27 "regex": "-----BEGIN EC PRIVATE KEY-----",

Critical

Secret Pattern

EC private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L27

28 "description": "Elliptic Curve private key in PEM format",

29 "risk": "Can sign data, authenticate, and decrypt EC-encrypted content.",

30 "fix": "Use a secret manager or mount the key at runtime."

31 },

32 {

33 "id": "dsa-private-key",

34 "name": "DSA Private Key",

35 "severity": "critical",

36 "regex": "-----BEGIN DSA PRIVATE KEY-----",

37 "description": "DSA private key in PEM format (deprecated algorithm)",

38 "risk": "Can sign data and authenticate. DSA is deprecated — migrate to Ed25519.",

39 "fix": "Remove and rotate. Migrate to Ed25519 keys."

40 },

41 {

42 "id": "pgp-private-key-block",

43 "name": "PGP Private Key Block",

44 "severity": "critical",

45 "regex": "-----BEGIN PGP PRIVATE KEY BLOCK-----",

46 "description": "PGP/GPG private key block",

47 "risk": "Can decrypt PGP-encrypted data and sign messages as the key owner.",

48 "fix": "Use GPG agent. Never store private keys in repositories."

49 },

50 {

51 "id": "generic-private-key",

52 "name": "Generic Private Key",

53 "severity": "critical",

54 "regex": "-----BEGIN PRIVATE KEY-----",

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L54

55 "description": "PKCS#8 private key in PEM format",

56 "risk": "Generic private key — risk depends on what it's used for (TLS, signing, auth).",

57 "fix": "Use a certificate manager (ACM, Let's Encrypt auto-renewal) or secret vault."

58 },

59 {

60 "id": "pkcs12-password",

61 "name": "PKCS12/PFX Password",

62 "severity": "warning",

63 "regex": "(?i)(?:pkcs12|pfx|p12).*(?:password|pass|passphrase)\\s*[=:]\\s*['\"]?[^\\s'\"]+['\"]?",

64 "description": "Password for a PKCS12/PFX certificate bundle",

65 "risk": "Can unlock the certificate bundle and extract the private key.",

66 "fix": "Store the password in a secret manager, reference by environment variable."

67 }

68 ]

69}

hooks/pre-commit.shView file

•path = hooks/pre-commit.sh kind = build_helper sizeBytes = 4548 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/pre-commit.shView on unpkg

patterns/aws.jsonView file

Lines 1-34json

2 "provider": "aws",

3 "display_name": "Amazon Web Services",

4 "patterns": [

5 {

6 "id": "aws-access-key-id",

7 "name": "AWS Access Key ID",

8 "severity"

README.mdView file

Lines 103-143markdown

103Type: OpenAI Project API Key

104File: .env:3

105Value: sk-pro....Q7xR

106Risk: Access to OpenAI API. Attacker can run models

107 and incur significant charges on your account.

108━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

109FIX: .env should NEVER be committed.

110 1. Add .env to .gitignore

111 2. Remove from git: git rm --cached .env

112 3. Rotate the key: https://platform.openai.com/api-keys

113━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

114

Source & flagged code

8 flagged · loading source

patterns/crypto.jsonView file

9patternName = private_key_rsa severity = critical line = 9 matchedText = "regex":...--",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

patterns/crypto.jsonView on unpkg · L9

9patternName = private_key_rsa severity = critical line = 9 matchedText = "regex":...--",

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L9

18patternName = private_key_openssh severity = critical line = 18 matchedText = "regex":...--",

Critical

Secret Pattern

OpenSSH private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L18

27patternName = private_key_ec severity = critical line = 27 matchedText = "regex":...--",

Critical

Secret Pattern

EC private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L27

54patternName = private_key_rsa severity = critical line = 54 matchedText = "regex":...--",

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L54

hooks/pre-commit.shView file

•path = hooks/pre-commit.sh kind = build_helper sizeBytes = 4548 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/pre-commit.shView on unpkg

patterns/aws.jsonView file

14patternName = aws_access_key severity = critical line = 14 matchedText = "false_p...LE"]

Critical

Secret Pattern

AWS access key ID in patterns/aws.json

patterns/aws.jsonView on unpkg · L14

README.mdView file

123patternName = private_key_openssh severity = critical line = 123 matchedText = Value: ...----

Critical

Secret Pattern

OpenSSH private key in README.md

README.mdView on unpkg · L123

Findings

7 Critical1 Medium3 Low

CriticalCritical Secretpatterns/crypto.json

CriticalSecret Patternpatterns/crypto.json

CriticalSecret Patternpatterns/aws.json

CriticalSecret PatternREADME.md

MediumShips Build Helperhooks/pre-commit.sh

LowNon Install Lifecycle Scripts

LowScripts Present

LowFilesystem

Source & flagged code

8 flagged

patterns/crypto.jsonView file

Lines 1-70json

2 "provider": "crypto",

3 "display_name": "Cryptographic Material & Private Keys",

4 "patterns": [

5 {

6 "id": "rsa-private-key",

7 "name": "RSA Private Key",

8 "severity": "critical",

9 "regex": "-----BEGIN RSA PRIVATE KEY-----",

Critical

Critical Secret

Package contains a critical-looking secret pattern.

patterns/crypto.jsonView on unpkg · L9

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L9

10 "description": "RSA private key in PEM format",

11 "risk": "Can impersonate the key owner, decrypt data, sign documents. If used for SSH, grants server access.",

12 "fix": "Never commit private keys. Use SSH agent, secret manager, or mount at runtime."

13 },

14 {

15 "id": "openssh-private-key",

16 "name": "OpenSSH Private Key",

17 "severity": "critical",

18 "regex": "-----BEGIN OPENSSH PRIVATE KEY-----",

Critical

Secret Pattern

OpenSSH private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L18

19 "description": "OpenSSH private key (Ed25519, ECDSA, or RSA)",

20 "risk": "Grants SSH access to any server that has the corresponding public key in authorized_keys.",

21 "fix": "Use SSH agent forwarding. Never commit SSH keys to a repository."

22 },

23 {

24 "id": "ec-private-key",

25 "name": "EC Private Key",

26 "severity": "critical",

27 "regex": "-----BEGIN EC PRIVATE KEY-----",

Critical

Secret Pattern

EC private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L27

28 "description": "Elliptic Curve private key in PEM format",

29 "risk": "Can sign data, authenticate, and decrypt EC-encrypted content.",

30 "fix": "Use a secret manager or mount the key at runtime."

31 },

32 {

33 "id": "dsa-private-key",

34 "name": "DSA Private Key",

35 "severity": "critical",

36 "regex": "-----BEGIN DSA PRIVATE KEY-----",

37 "description": "DSA private key in PEM format (deprecated algorithm)",

38 "risk": "Can sign data and authenticate. DSA is deprecated — migrate to Ed25519.",

39 "fix": "Remove and rotate. Migrate to Ed25519 keys."

40 },

41 {

42 "id": "pgp-private-key-block",

43 "name": "PGP Private Key Block",

44 "severity": "critical",

45 "regex": "-----BEGIN PGP PRIVATE KEY BLOCK-----",

46 "description": "PGP/GPG private key block",

47 "risk": "Can decrypt PGP-encrypted data and sign messages as the key owner.",

48 "fix": "Use GPG agent. Never store private keys in repositories."

49 },

50 {

51 "id": "generic-private-key",

52 "name": "Generic Private Key",

53 "severity": "critical",

54 "regex": "-----BEGIN PRIVATE KEY-----",

Critical

Secret Pattern

RSA private key in patterns/crypto.json

patterns/crypto.jsonView on unpkg · L54

55 "description": "PKCS#8 private key in PEM format",

56 "risk": "Generic private key — risk depends on what it's used for (TLS, signing, auth).",

57 "fix": "Use a certificate manager (ACM, Let's Encrypt auto-renewal) or secret vault."

58 },

59 {

60 "id": "pkcs12-password",

61 "name": "PKCS12/PFX Password",

62 "severity": "warning",

63 "regex": "(?i)(?:pkcs12|pfx|p12).*(?:password|pass|passphrase)\\s*[=:]\\s*['\"]?[^\\s'\"]+['\"]?",

64 "description": "Password for a PKCS12/PFX certificate bundle",

65 "risk": "Can unlock the certificate bundle and extract the private key.",

66 "fix": "Store the password in a secret manager, reference by environment variable."

67 }

68 ]

69}

hooks/pre-commit.shView file

•path = hooks/pre-commit.sh kind = build_helper sizeBytes = 4548 magicHex = [redacted]

Medium

Ships Build Helper

Package ships non-JavaScript build or shell helper files.

hooks/pre-commit.shView on unpkg

patterns/aws.jsonView file

Lines 1-34json

2 "provider": "aws",

3 "display_name": "Amazon Web Services",

4 "patterns": [

5 {

6 "id": "aws-access-key-id",

7 "name": "AWS Access Key ID",

8 "severity"

README.mdView file

Lines 103-143markdown

103Type: OpenAI Project API Key

104File: .env:3

105Value: sk-pro....Q7xR

106Risk: Access to OpenAI API. Attacker can run models

107 and incur significant charges on your account.

108━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

109FIX: .env should NEVER be committed.

110 1. Add .env to .gitignore

111 2. Remove from git: git rm --cached .env

112 3. Rotate the key: https://platform.openai.com/api-keys

113━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━━

114