GavenXia

Agentleak — AI skill for Claude Code

AI community

Find secrets you already leaked into AI chat sessions — offline, local-first.

How to install Agentleak

This entry records only its repository, not the path inside it, so there is no exact command to give. Open GavenXia/agentleak and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Agentleak does

Find secrets you already leaked into AI chat sessions — offline, local-first.

Alternatives in AI

Cl4r1t4s — LEAKED SYSTEM PROMPTS FOR CHATGPT, CLAUDE, GEMINI, GROK, PERPLEXITY, CURSOR, LOVABLE, REPLIT, AND MORE 47.2k ★
Cumora — Where agent teams gather 3.2k ★
Pebrel — AI-native, GPU-accelerated terminal emulator for Windows with SSH, persistent sessions, split panes, and first 670 ★

README

agentleak

**Find the secrets you already leaked into AI chat sessions — before someone else does.**

[![CI](https://github.com/GavenXia/agentleak/actions/workflows/ci.yml/badge.svg)](https://github.com/GavenXia/agentleak/actions/workflows/ci.yml) [![npm](https://img.shields.io/npm/v/agentleak)](https://www.npmjs.com/package/agentleak) [![license](https://img.shields.io/badge/license-MIT-green)](LICENSE) [![node](https://img.shields.io/badge/node-%E2%89%A520-339933)](package.json) [![offline](https://img.shields.io/badge/network-0%20calls-2ea44f)](SECURITY.md)

An offline, local-first CLI that discovers **every AI-agent conversation store on your machine**, scans it for API keys / SSH keys / tokens, and turns the findings into a **rotation checklist** — with a persistent baseline so you only ever see _new_ leaks.

[Quick start](#-quick-start) · [How it works](#-how-it-works) · [Agent integrations](#-install-per-agent) · [Security promises](#️-security--trust)

[中文文档](README.zh-CN.md)

🚨 The problem

**Your AI agent chats are a credential leak you have never audited.**

Every time you (or a teammate) pasted an API key into a chat — "here, use this token to deploy" — that secret was written to disk in plaintext, unencrypted, often forever:

~/.claude/projects/**/session-*.jsonl    # full Claude Code transcripts
~/.codex/sessions/**/*.jsonl             # full Codex CLI transcripts
~/Library/Application Support/Cursor/    # chat bodies in SQLite
~/.claude/paste-cache/*.txt              # raw pasted blobs

Meanwhile, the blast radius of any single paste keeps growing:

| Fact | Source | | ------------------------------------------------------------------