SkillTrust

← All skills

trufflehog

65 / 100 · Review before installing

Check before installing. Some of what it can do is expected: a coding skill usually runs build and test commands.

By javimosch/supercli (GitHub) · coding · 57 stars · scanned at commit 18c32f4

Use this skill when the user wants to scan for leaked credentials, API keys, secrets in git repos, files, or CI/CD pipelines.

Works with any agent that supports SKILL.md skills.

What this skill can do

Downloads and installs other software

The author does not mention this. It runs automatically when the plugin is installed.

Found in 3 places.

Sends data to these websites: raw.githubusercontent.com

The author does not mention this. It runs automatically when the plugin is installed.

Found in 3 places.

Runs commands on your computer

The author does not mention this. It runs automatically when the plugin is installed. Expected for a coding skill.

Found in 6 places.

Show 3 more

Changes files outside its own folder

The author does not mention this. It runs automatically when the plugin is installed.

Found in 1 place.

Safer alternatives

Low-risk skills in the same category (coding) that look related. Check that one does what you need.

Install

Paste this into your terminal. It downloads exactly the version we scanned, not whatever is newest.

if [ -e ~/.agents/skills/'trufflehog' ] || [ -L ~/.agents/skills/'trufflehog' ]; then echo 'A skill folder named trufflehog already exists — not replacing it' >&2; false; else d=$(mktemp -d) && git clone --quiet --filter=blob:none --no-checkout 'https://github.com/javimosch/supercli' "$d" && git -C "$d" checkout --quiet '18c32f4b7197d246bdedcc9eca5d0403eaac0bc2' -- 'plugins/trufflehog/skills/quickstart' && mkdir -p ~/.agents/skills && cp -R "$d"/'plugins/trufflehog/skills/quickstart' ~/.agents/skills/'trufflehog' && rm -rf "$d"; fi

Codex reads ~/.agents/skills directly. For Claude Code, Cursor, Copilot, Gemini CLI, Antigravity or OpenCode, also link it. For Claude Code: ln -s ~/.agents/skills/'trufflehog' ~/.claude/skills/'trufflehog' (other agents: ~/.cursor/skills, ~/.copilot/skills, ~/.gemini/skills, ~/.gemini/config/skills, ~/.config/opencode/skills). Or install through the finder skill, which does both.

Badge for your README

The badge for javimosch/supercli shows the score of its lowest-scoring skill.

SkillTrust badge for javimosch/supercli

[![SkillTrust](https://zalavijaysinh.github.io/skilltrust/badges/javimosch/supercli.svg)](https://zalavijaysinh.github.io/skilltrust/repos/javimosch/supercli/)

Score history

DateVersionScore
2026-11-0818c32f465
2026-11-0618c32f475