Keeping secrets out of CLAUDE.md, AGENTS.md and other agent instructions
Why it matters
Agent instruction files are read by every tool and every contributor — and often committed to public repositories. Credentials and internal hostnames in them leak like any other file.
How to fix it
Does your repository pass this check?
Free for public GitHub repositories, no account needed. 50+ DevOps and security checks in about ten seconds.