{"name":"secrets-exposure-check","description":"Scans project config files for hardcoded secrets before you deploy. Fetches top-level config files (.env*, wrangler.toml, vercel.json, next.config.*, package.json, etc.) and scans for hardcoded AWS/OpenAI/Anthropic/Stripe/GitHub keys, private keys, DB URLs with passwords, JWT secrets, weak values in .env.example, and server-only env vars accidentally exposed via NEXT_PUBLIC_. Returns 0-100 score, per-finding kind/severity/path/line/redacted-evidence/recommendation, and a Venice plain-English verdict. Dual input: {repo: 'owner/name'} for public GitHub or {files: [{path, content}, ...]} for private / agent-workspace use. Use it as a secrets exposure scan, hardcoded API key detector, .env-committed-key audit, Next.js client env leak detector, or pre-deploy secret gate.","price":"$0.02","method":"POST","input_schema":{"oneOf":[{"type":"object","properties":{"repo":{"type":"string","description":"GitHub repo in 'owner/name' format"},"branch":{"type":"string","description":"Optional branch; defaults to repo's default_branch"}},"required":["repo"]},{"type":"object","properties":{"files":{"type":"array","items":{"type":"object","properties":{"path":{"type":"string"},"content":{"type":"string"}},"required":["path","content"]}}},"required":["files"]}]},"input_example":{"repo":"rooz21/prooflayer-fixtures"},"output_example":{"score":80,"risk_level":"high","findings":[{"kind":"hardcoded_secret","severity":"critical","path":".env","line":3,"evidence":"AWS_ACCESS_KEY_ID=[REDACTED:aws_access_key]","recommendation":"Remove the aws_access_key from .env and rotate it. Move to a runtime env var or secret store."},{"kind":"hardcoded_secret","severity":"critical","path":".env","line":5,"evidence":"STRIPE_SK=[REDACTED:stripe_key]","recommendation":"Remove the stripe_key from .env and rotate it. Move to a runtime env var or secret store."}],"signals":{"target_files_scanned":2,"target_files_available":18,"finding_counts_by_kind":{"hardcoded_secret":2}},"summary":"Two live secrets are committed to .env (AWS + Stripe). Rotate both immediately; purge from git history.","metadata":{"repo":"rooz21/prooflayer-fixtures","branch":"main","files_scanned":2,"files_fetched_via_api":3}},"x402_payment_required":true,"x402_facilitator":"https://api.cdp.coinbase.com/platform/v2/x402"}