{
  "skill": "gitleaks",
  "kind": "external",
  "needs": [
    "git-diff-or-history"
  ],
  "produces": [
    "secret-leak-findings"
  ],
  "constraints": [
    "сканирует секреты в diff/истории через lefthook pre-commit/pre-push",
    "НЕ SAST-уязвимости кода (Semgrep)"
  ],
  "preview-form": "none",
  "defaults": [
    "protect --staged на pre-commit; полная история на pre-push"
  ],
  "key-decisions": [
    "реальный секрет vs тестовая фикстура (false-positive)"
  ],
  "acceptance-criteria": [
    "0 утечек секретов в diff/истории"
  ],
  "source": {
    "version": "n/a",
    "hash": "0000000000000000000000000000000000000000000000000000000000000000",
    "path": ""
  }
}