openauditB85out of 100: openaudit's audit of itself
agent.secrets-config

Secrets & configuration review

Reviews how secrets and configuration actually flow — logs, debug modes, env handling, client bundles, CI pipelines, container images and IAM — beyond what regex secret scanners catch. (agentic, uses Claude)

Engine
Agent
Targets
Codebase, Container, Infrastructure as code
Areas
Security, Best practices
Runs
Opt-in: only when selected with --only
Network
Contacts services beyond the target

Run only this auditor

bunx openaudit . --only agent.secrets-config

Runs a playbook with the Claude Agent SDK. Needs ANTHROPIC_API_KEY or a Claude Code login; host agents can run the same playbook over MCP without a key.

Playbook

Reviews how secrets and configuration actually flow — logs, debug modes, env handling, client bundles, CI pipelines, container images and IAM — beyond what regex secret scanners catch.

Host agents fetch it with get_playbook over MCP. How playbooks work