mark-secret-scan

Paste any text, code, config, or log output — get back a structured report of potential credential leaks: AWS keys, GitHub tokens, Stripe keys, Anthropic/OpenAI API keys, Slack tokens, JWTs, bearer tokens, hardcoded passwords, private key blocks, and generic secret patterns. Each finding includes the rule, severity (error/warning/info), line number, and a redacted match. No LLM, no network, deterministic. Input: raw text string or JSON {"text": "..."}. Use before committing code, sharing logs, or reviewing config files.