---
title: "scan-secrets"
description: "Blocks known credential patterns -- vendor key prefixes, private-key blocks, and key/token/password assignments -- at two enforcement points: at commit (the git hook, over staged changes) and at agent tool-use (the mcp-g"
canonical: https://agentpluginsdirectory.com/plugins/scan-secrets--open-coder-ai-org
last-updated: 2026-09-08
---

# scan-secrets
Blocks known credential patterns -- vendor key prefixes, private-key blocks, and key/token/password assignments -- at two enforcement points: at commit (the git hook, over staged changes) and at agent tool-use (the mcp-gateway / agent write guard, over a tool call's arguments), so a secret is caught as the agent writes it, before it ever reaches a commit. Matched by pattern, not by entropy analysis. Best-effort guard; not a replacement for a dedicated secret scanner.
- Slug: scan-secrets--open-coder-ai-org
- Publisher: chock-core
- Repository: https://github.com/open-coder-ai-org/chock-catalog
- Manifest: .agents/policies/scan-secrets/plugin.json
- Version: 0.0.6
- License: Apache-2.0
- Category (editorial): other
- Skills: 1 (scan-secrets)
- MCP servers: 0
- Stars: 1
- Listing: https://agentpluginsdirectory.com/plugins/scan-secrets--open-coder-ai-org
- Schema: https://agent-plugins.org/schemas/1.0.0/plugin.schema.json