Leaving passwords in your shell history is a security issue. I wrote a tool to help check: checkhistory. Feel free to send me pull requests / patches with additional regexes to match.