GavenXia

Agentleak — AI skill for Claude Code

AI community

Find secrets you already leaked into AI chat sessions — offline, local-first.

How to install Agentleak

This entry records only its repository, not the path inside it, so there is no exact command to give. Open GavenXia/agentleak and copy the folder into ~/.claude/skills/, or the file into ~/.claude/agents/.

What Agentleak does

Find secrets you already leaked into AI chat sessions — offline, local-first.

Alternatives in AI

UltraCode Shim — Give Claude Code's ultracode mode to ANY model you already pay for 422 ★
TurboLLM — Run any local LLM engine, auto-tuned to your GPU — polished web UI + OpenAI/Anthropic-compatible API 251 ★
Awareness Local — Local-first AI agent memory — one command, works offline, no account needed 199 ★

README

agentleak

**Find the secrets you already leaked into AI chat sessions — before someone else does.**

[![CI](https://github.com/GavenXia/agentleak/actions/workflows/ci.yml/badge.svg)](https://github.com/GavenXia/agentleak/actions/workflows/ci.yml) [![npm](https://img.shields.io/npm/v/agentleak)](https://www.npmjs.com/package/agentleak) [![license](https://img.shields.io/badge/license-MIT-green)](LICENSE) [![node](https://img.shields.io/badge/node-%E2%89%A520-339933)](package.json) [![offline](https://img.shields.io/badge/network-0%20calls-2ea44f)](SECURITY.md)

An offline, local-first CLI that discovers **every AI-agent conversation store on your machine**, scans it for API keys / SSH keys / tokens, and turns the findings into a **rotation checklist** — with a persistent baseline so you only ever see _new_ leaks.

[Quick start](#-quick-start) · [How it works](#-how-it-works) · [Agent integrations](#-install-per-agent) · [Security promises](#️-security--trust)

[中文文档](README.zh-CN.md)

🚨 The problem

**Your AI agent chats are a credential leak you have never audited.**

Every time you (or a teammate) pasted an API key into a chat — "here, use this token to deploy" — that secret was written to disk in plaintext, unencrypted, often forever:

~/.claude/projects/**/session-*.jsonl    # full Claude Code transcripts
~/.codex/sessions/**/*.jsonl             # full Codex CLI transcripts
~/Library/Application Support/Cursor/    # chat bodies in SQLite
~/.claude/paste-cache/*.txt              # raw pasted blobs

Meanwhile, the blast radius of any single paste keeps growing:

| Fact | Source | | ------------------------------------------------------------------