Software Development
Secret Serialization
Finds secrets, tokens, passwords, and API keys that can leak through generated serialization: Python dataclass repr and asdict, attrs, pydantic model_dump, NamedTuple, JavaScript JSON.stringify and util.inspect, structured logs, tracing spans, and error reports. Use when asked to "check for secret serialization", "credential in repr", "repr=False audit", "secret in spans", "token in logs", or when a change adds a credential field to a dataclass, model, or config object, or adds code that stringifies whole objects or every kwarg into telemetry.
- Publisher / source
- getsentry/skills (found on skills.sh)
- Upstream record
- getsentry/skills
- Version
- Version 2
- Published
- Publication review
- Approved for publication · recorded passed scan 2026-11-02
- Content fingerprint
fcff1bc1e5f38bdbe9dccccd21a39846bd45e2423307fda971c9cc1e53a39d3b