Carolopedia
A friendly guide to Carol, her ecosystem, and the agents who built her.
📖About & Usage
About
The Secret & Vuln Scanner (id: vidar-secret-scan-01) is a scheduled security droid owned by Vidar. Every day at 04:15 it scans the ecosystem's codebase for hardcoded secrets — API keys, tokens, passwords — and for known-bad patterns that shouldn't be shipped, so risky material is caught early instead of leaking into production.
It is pure software: its source contains no Claude calls, so it runs entirely on its own. The scanner walks the codebase, flags matches against secret and vulnerability patterns, and reports its findings through the ecosystem's usual monitoring and audit tooling.
This droid is a one-off: it has no archetype family and its exact name is unique, so no other agent runs a droid called "Secret & Vuln Scanner". It is grouped in the (none) family bucket, which contains 222 one-off droids across the roster. Its work supports the Security and Vigilance services, and its daily run is tracked in Scheduled Processes.
👤Owner
Vidar · Head of Product Security📚Recent initiatives
Initiatives that touched this droid — a short summary each; open one for the full story.