OWASP/wrongsecrets
Can I trust it?
Worth a closer look before you use it.
Stars from real accounts No data
We haven't checked its stars for fakes yet.
Active OK
Last change 3 days ago.
Licence Check
AGPL-3.0: free to use. If you include it in something you distribute, or even only run as an online service, you must publish your code under the same licence.
Quick checks from public data. They help, but they are no guarantee.
From the GitHub description
Vulnerable app with examples showing how to not use secrets
We haven't written this repo up yet. It gets a summary once it enters the radar's top.
How to use it
Ask your AI to set it up
Paste this into Claude, ChatGPT or your coding assistant.
Help me install and set up OWASP/wrongsecrets in my project. Follow its README: https://github.com/OWASP/wrongsecrets. Explain each step and check it is safe before running anything.
Star curve
Not enough history to draw a curve yet.
Get alerts for repos like this
We'll email you when something in AI agents starts rising. Free, once a week, only what matches.
21,411 GitHub repos watched and ranked every hour. Figures as of 27 October 2026.
What arrives: one email on Mondays with the repos that match, never more. See last week's. Privacy
For maintainers
Add this badge to your README. It shows the repo's place on the radar, updates every hour and links back to this page.
[](https://repoalerts.com/repo/OWASP/wrongsecrets?ref=badge)Similar repos
- t3dotgg/tstack
A collection of agent skills for Claude Code and Codex covering PR workflows: filing and babysitting PRs, taking over stale PRs, multi-model review loops, and formatting PR comments. Some skills use T
- google/elephant-goldfish-model
A plugin for spec-driven development with AI coding agents. Deep-context sessions draft design specifications, and isolated zero-context subagents stress-test them before code is written. Includes bra
- JetBrains/thinkrail
A desktop app and browser-served IDE built around the pi coding agent. It isolates work in git worktree workspaces, provides an editor, file tree, terminals and multiple agent chats, and maintains pro
- KrushnaVardhanReddy/PaperPilot
A Rust PDF and document toolkit that runs locally. The same engine is available as an MCP server for AI coding agents, a CLI, a browser (WASM) build, a desktop app, and a local REST API. It supports m
- unclebob/ub-mode
An agent skill of engineering rules for writing or changing code, covering test-driven development, refactoring, architecture and commit discipline. It is paired with quality-gate tools for CRAP score
- Pomerado/pomerado
Open-source TypeScript toolkit that builds MCP integrations for websites from a natural language task description, including sites without an API and sites behind login or two-factor authentication. I