Scans staged changes and diffs for leaked secrets, API keys, tokens, and credentials before commit or PR. Use when preparing commits, opening pull requests, reviewing diffs, or when the user mentions secrets, tokens, .env files, or credential leaks.