Loading
Pre-commit secret and credential scanner with remediation checklist — scans staged changes for API keys, tokens, private keys, hardcoded credentials, insecure defaults
npx skills add Reactive-Skills/skills --skill security-scannpx -y @reactive-skills/axi invoke security-scan12
Hierarchical nodes
COLLECT_STAGED
Bootstrap entrypoint
4
Whitelisted for safety
3
Automated projections
Visual state machine topology parsed directly from the official STATECHART.md in Reactive-Skills/skills:
Each state is an isolated operational slice. Transitions occur only when typed signals satisfy programmatic guard conditions.
Collect git-staged files for scanning
Outgoing Transitions
Array.isArray(event.payload.staged_files) && event.payload.staged_files.length > 0Composite state: secrets scan, credentials scan, config scan
Outgoing Transitions
event.payload.severity === 'critical'Scan for API keys, tokens, private keys using regex + entropy heuristics
Outgoing Transitions
event.payload.exit_code === 0Scan for hardcoded credentials (passwords, API keys in config)
Outgoing Transitions
event.payload.exit_code === 0Scan for insecure defaults, hardcoded IPs, debug mode in production
Outgoing Transitions
event.payload.exit_code === 0Composite state: generate findings summary and remediation checklist
Outgoing Transitions
Summarize all findings by severity and category
Outgoing Transitions
Generate actionable remediation checklist for each finding
Outgoing Transitions
Human review gate: pass, request remediation, or block
Outgoing Transitions
event.payload.approved === trueevent.payload.remediation_requested === trueevent.payload.rejected === trueTerminal state: Scan complete, no critical issues
Terminal state: Critical secrets or credentials found, commit blocked
Terminal state: Unrecoverable error occurred
Inspect or drive this state machine directly via the token-efficient AXI CLI:
Check state:
Inspect hierarchy:
Tail events:
Runtime variables persisted across state transitions:
staged_filesscan_resultssecrets_foundcredentials_foundinsecure_configsfindingsremediation_stepspass_fail_verdictcritical_findingsRead models automatically rendered upon transition:
Add to your Claude Desktop, Cursor, or VS Code settings:
{
"mcpServers": {
"reactive-skills": {
"command": "npx",
"args": [
"-y",
"@reactive-skills/axi",
"mcp"
]
}
}
}