ggshield-scanner
Wraps GitGuardian's `ggshield` CLI to scan repositories, files, staged changes, and Docker images for hardcoded secrets. The skill reads `GITGUARDIAN_API_KEY`, spawns `ggshield`/`git` via `subprocess.run`, and references `https://api.gitguardian.com` (network activity).