Specstory Guard

If you're using SpecStory to track AI coding sessions, this installs a pre-commit hook that scans your .specstory/history directory for accidentally captured secrets before they hit your repository. It catches the usual suspects like AWS keys, bearer tokens, and private keys, then blocks the commit until you redact them. The hook runs automatically, the scan is fast (under a second for hundreds of files), and you can allowlist false positives with regex patterns. Smart safety net for a real problem: API keys you pasted into chat or credentials that showed up in command output can easily end up in your history files without you noticing.

Install to Claude Code

npx -y skills add specstoryai/agent-skills --skill specstory-guard --agent claude-code