sanitize

A 12-point pre-commit hook and Claude Code skill that blocks secrets, credentials, and sensitive data from being committed to git.

What it catches

| # | Check | Severity | |---|-------|----------| | 1 | Full file audit | info | | 2 | Private keys / mnemonics | block | | 3 | API keys / tokens / secrets | block | | 4 | .env files | block | | 5 | .mcp.json files | block | | 6 | config.json with secrets | block/warn | | 7 | Plaintext passwords | block | | 8 | RPC URLs with embedded keys | block | | 9 | Wallet addresses in non-test files | warn | | 10 | console.log leaking sensitive data | warn | | 11 | .gitignore coverage gaps | block | | 12 | Test files with real credentials | block |

Install

Agent skill (Claude Code, Cursor, Copilot, etc.)

npx skills add vxcozy/sanitize

This installs the /sanitize slash command into your project. Works with any tool that supports the Agent Skills standard.

Pre-commit hook

git clone https://github.com/vxcozy/sanitize.git
./sanitize/scripts/install-hooks.sh /path/to/your/repo

# Or multiple repos at once
./sanitize/scripts/install-hooks.sh ./repo-a ./repo-b ./repo-c

The hook runs automatically on every git commit. Bypass with git commit --no-verify when needed.

Documentation

• Tutorial: Getting started
• How-to guides
• Reference
• Explanation

License

MIT