arthurgarmider

Havik — Development skill for Claude Code

Development community

What did your coding agent touch.

How to install Havik

This entry records only its repository, not the path inside it, so there is no exact command to give. Open arthurgarmider/havik and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Havik does

What did your coding agent touch? npx havik shows the credential files, secrets and risky scripts Claude Code used in the last 30 days. Local, nothing sent.

Alternatives in Development

Identify Assumptions Existing — Identify risky assumptions across Value, Usability, Viability, Feasibility 7.8k ★
Breach Check — HIBP k-anonymity check on a password wordlist 4.5k ★
Last30days Skill — Claude Code skill that researches any topic across Reddit + X from the last 30 days, then writes copy-paste-re 4.4k ★

README

havik

What did your coding agent touch? `npx agent-havik` (the command is `havik` once installed) reads the transcripts Claude Code already keeps on your machine and shows, on one screen, the credential files, secrets and risky scripts of your last 30 days. Nothing is installed and nothing is sent.

$ npx agent-havik
havik: what Claude Code touched in the last 30d
14 sessions · 9,204 tool calls · 12 active days · read on this machine, nothing sent

  sensitive files touched        3  ~/.aws/credentials, ~/.npmrc, ~/git/billing/.env
  secrets entered the context    2  AWS access key, GitHub token

  2026-10-02  grep ~/.aws/credentials: AWS credentials, outside this project  in billing

4 warnings in 12 days (0.3 a day) would have reached the session.
Live warnings, detect-only:  npx agent-havik guard install
Every session in detail:     npx agent-havik guard replay

(An example; your numbers come from your own `~/.claude/projects`.) It is also a static scanner for AI agent setups: skills, plugins, hooks, permissions and MCP servers. **Prototype (0.4).** Everything runs locally. The only thing that uses the network is the optional `--ai` pass, which is off by default (see [AI checks](#ai-checks---ai)).

npx agent-havik                         # what Claude Code touched in the last 30 days, on one screen
npx agent-havik scan                    # your home directory: Claude Code config, MCP configs, skills
npx agent-havik scan ./my-skill         # one skill or repo
npx agent-havik scan . --format json
npx agent-havik scan ./my-skill --ai    # opt in: also ask TypeSafe Jev about each skill
npx agent-havik guard replay            # every past session in detail, nothing installed
npx agent-havik guard install           # Claude Code hooks that record and warn about sensitive data access
npx agent-havik audit                   # what the guard recorded in the last 7 days

Needs Node 20+. Exit code: `2` at least one critical finding, `1` at least o