BBB — stable

ggshield Secret Scanner (ggshield-scanner)

above the trust line (BBB): proven adoption, mature, nothing alarming in its instructions.

Detect 500+ types of hardcoded secrets (API keys, credentials, tokens) before they leak into git. Wraps GitGuardian's ggshield CLI.

Signals

Downloads	3,699 (7d: series too short)
Installs · stars · versions	125 · 0 · 3
Track record	212 days in the registry
Author	amascia-gg
Requires	`ggshield`
Instructions read	yes: payees, wallets and shell patterns extracted from SKILL.md

Flags

KEYS: handles private keys, seed phrases or secret keys: audit before installing

Who it pays (x402 counterparties found in its instructions)

service	service rating	wallet
No payee found in its instructions.

Install

openclaw skills install @amascia-gg/ggshield-scanner · registry page

For agents

Free JSON: https://agenteconomy.report/k/ggshield-scanner.json · badge: https://agenteconomy.report/k/ggshield-scanner.svg · paid record via x402: GET https://agenteconomy.report/api/skill/ggshield-scanner (US$ 0.005). Check any skill before installing it with the x402-trust-check skill.

How this is computed

Adoption (downloads relative to the registry, 7-day velocity, installs), maturity (age, release cadence, stars, author portfolio), inherited payment trust (every host or wallet the skill's instructions pay is looked up in the x402 service trust index; paying a rated service inherits its tier, an unknown hard-coded wallet is flagged) and hygiene (registry moderation verdict, license, declared setup, origin). Flags cap the tier, they never add to it. Trust line at BBB. Rating as of 2026-08-29.