scan_secrets

5 registry entries were observed exposing a tool named scan_secrets — none of them flagged as a privileged capability.

Every row is point-in-time scan output, dated below. Forge has an observed tool surface for 8,470 of 26,658 scannable entries (32%) — an entry that has not been scanned cannot appear here, so absence from this list is not evidence that an entry does not expose this tool.

1. guardvibe
   trust 60/100 · BMCP serverobserved 2026-06-19 · static extraction
   Deterministic security layer your AI can't be. 462 rules, 39 tools, CLI + doctor + host audit.
2. io.github.78degrees/ghosthunt
   trust 60/100 · BMCP serverobserved 2026-06-13 · static extraction
   Find every leaked secret on your machine — API keys in .env files, shell history, and configs.
3. io.github.bkalafat/diffpilot
   trust 60/100 · BMCP serverobserved 2026-06-14 · static extraction
   MCP server for PR code review, commit messages, changelogs, and secret detection.
4. io.github.digidenone/synapse-audit
   trust 60/100 · BMCP serverobserved 2026-06-13 · static extraction
   AI-Powered Security Scanner for LLMs. Detects vulnerabilities and syncs with SynapseAudit.
5. io.github.mdfifty50-boop/agent-security
   trust 60/100 · BMCP serverobserved 2026-06-13 · static extraction
   Security scanning and threat detection for AI agents

All indexed toolsSearch the registry for scan_secrets