Repomix Safe Mixer

This wraps repomix packaging with automatic credential scanning to prevent you from accidentally sharing API keys and secrets in your code bundles. It blocks the pack operation if it detects patterns like AWS keys, Supabase URLs, JWTs, or Stripe tokens, giving you file and line locations to clean up first. The workflow is straightforward: run safe_pack.py on your directory and it either packages cleanly or stops and shows you what needs fixing. It's particularly smart about skipping false positives like placeholder text and environment variable references. Honestly, this should probably be the default way to run repomix if you're sharing packages with anyone, since it's too easy to miss a hardcoded credential buried in a large codebase.

skills.sh installs: 946
GitHub stars: 1.5K
last updated: Aug 21, 2026

View on GitHub

Install

$ npx -y skills add daymade/claude-code-skills --skill repomix-safe-mixer --agent claude-code

Installs into .claude/skills of the current project.

Files

Repomix Safe Mixer

Overview

Safely package codebases with repomix by automatically detecting and removing hardcoded credentials.

This skill prevents accidental credential exposure when packaging code with repomix. It scans for hardcoded secrets (API keys, database credentials, tokens), reports findings, and ensures safe packaging.

When to use: When packaging code with repomix for distribution, creating shareable reference packages, or whenever security concerns exist about hardcoded credentials in code.

Core Workflow

Standard Safe Packaging

Use safe_pack.py from this skill's scripts/ directory for the complete workflow: scan → report → pack.

python3 scripts/safe_pack.py <directory>

What it does:

Scans directory for hardcoded credentials
Reports findings with file/line details
Blocks packaging if secrets found
Packs with repomix only if scan is clean

Example:

python3 scripts/safe_pack.py ./my-project

Output if clean:

🔍 Scanning ./my-project for hardcoded secrets...
✅ No secrets detected!
📦 Packing ./my-project with repomix...
✅ Packaging complete!
   Package is safe to distribute.

SKILL.md on GitHub