# False-positive wordlist for ClassiFinder.
#
# Independently authored by ClassiFinder. Each entry is a generic
# English/programming term, a placeholder phrase ("mytoken", "deletemelater"),
# or a ClassiFinder-specific key-format placeholder ("sk_xxxx", "pk_xxxx").
#
# Audited 2026-04-07 against TruffleHog's combined wordlists
# (fp_words.txt + fp_badlist.txt + fp_programmingbooks.txt, 3306 entries).
# Overlap was 14/79 (~18%), all of which are universal English/programming
# keywords (function, return, string, public, private, etc.) — facts about
# software, not copyrightable expression. The remaining 65 entries are
# demonstrably independent. No code or data was copied from any other
# secret scanner. See ATTRIBUTION.md.
#
# Lines starting with # are ignored by the loader.

private
public
default
admin
root
master
backup
temp
debug
internal
secret
undefined
null
function
return
string
object
class
module
import
export
const
variable
xxxx
yyyy
zzzz
test
demo
mock
stub
fake
lorem
ipsum
myapp
myservice
mytoken
mysecret
mypassword
mykey
yoursecret
yourtoken
yourkey
yourpassword
your_secret
your_token
your_key
sk_xxxx
pk_xxxx
api_xxxx
key_xxxx
token_xxxx
notreal
notasecret
notsecret
insecure
invalid
revoked
expired
disabled
temporary
sandbox
development
staging
__test__
samplekey
sampletoken
samplesecret
dummykey
dummytoken
dummysecret
fakekey
faketoken
fakesecret
testkey
testtoken
testsecret
deletemelater
donotuse
donot
