Aigate — AI skill for Claude Code
AI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs.
How to install Aigate
This entry records only its repository, not the path inside it, so there is no
exact command to give. Open jricramc/aigate and copy the folder into
~/.claude/skills/, or the file into ~/.claude/agents/.
What Aigate does
AI Prompt Secret Scanner: local proxy and Claude Code hook that blocks secrets before they reach AI APIs.
Alternatives in AI
- WindsurfAPI — Turn Windsurf / Devin Desktop's 100+ AI models (Claude, GPT, Gemini, DeepSeek, Kimi, GLM, SWE) into OpenAI-, A 3k ★
- DontFeedTheAI — Transparent anonymization proxy for AI-assisted pentesting 654 ★
- Hol Guard — Open-source antivirus for AI agents: block risky tools, secret access, prompt injection, malicious packages, M 485 ★
README
aigate
Secret hygiene for AI-generated code. Catches hardcoded credentials in prompts, tool inputs, generated code, and existing files.
Quick start
pip install aigate && aigate setup-allThat's it. This installs a background proxy (redact mode), a PostToolUse hook for file scanning, and registers the MCP server with Claude Code. Restart your terminal for env vars to take effect.
Requires Python 3.11+ and `jq`.
What it does
Three layers, one detection engine:
| Layer | Scope | How |
|---|---|---|
| Proxy | Network-level | Intercepts HTTPS requests to AI APIs. Redacts secrets before they leave your machine. |
| Hooks | Claude Code | PostToolUse scans files after Write/Edit. PreToolUse redacts tool inputs. |
| MCP Server | Any agent | Three tools agents call to scan code, store secrets, and audit files. |
`setup-all` installs all three. Or pick what you need:
aigate install-hook # hooks only (no proxy)
claude mcp add aigate aigate-mcp # MCP server only
aigate setup && aigate start # proxy onlyScan existing code
aigate scan-dir . # find secrets in a directory
aigate scan-dir . --fix --dry-run # preview what would change
aigate scan-dir . --fix # replace with env var refs, save to .envDetection
AWS keys, API tokens (OpenAI, Anthropic, GitHub, GitLab, Slack, SendGrid, Square), database URLs, private keys, GCP service accounts, Tailscale keys, env file secrets, and high-entropy password/token fields.
Detected secrets are mapped to conventional env var names:
| Token | Env var |
|---|---|
sk-ant-* |
ANTHROPIC_API_KEY |
sk-*, sk-proj-* |
OPENAI_API_KEY |
ghp_*, github_pat_* |
GITHUB_TOKEN |
glpat-* |
GITLAB_TOKEN |
xoxb-* |
SLACK_BOT_TOKEN |
SG.* |
SENDGRID_API_KEY |
AKIA* |
AWS_ACCESS_KEY_ID |
Proxy modes
aigate start -m block # reject requests (default)
aigate start -m redaRelated Skills
PrivAiTe
Self-hosted PII redaction proxy for LLM APIs and agent CLIs. Scrubs names, emails and secrets from Claude Code
Aigate AI Git Workflow Guard CLI
Pre-push Git safety CLI for AI-assisted coding: catch risky changes, possible secrets, weak PR readiness, and
Secure Agent
🔐 Egress inspection & secret-leak firewall for local AI agents — see what your agents send, catch secrets bef
Local Secure Prompt Agent
Browser extension that redacts PII (emails, phone numbers, Aadhaar/PAN, API keys, names, locations) from promp
PIIGuardAI
A macOS menu bar app that blocks messages containing PII before they reach Claude, ChatGPT, Gemini, and other
LLM Secret Manager
The secret manager for LLM agents: create, rotate, and use secrets they can never read. OS-native keyvault (ma
Related Agents
Hardcoded Secret Scanner
Scan a trading codebase for credentials that live in code, config committed to git, logs, tests, or documentat
Regression Guard
Proactive regression scanner that checks code changes against documented bug patterns. Use before commits, PRs
Sp Reviewer
Use as a pre-push guardrail before committing or pushing. Runs lint, build, tests and a secret scan, reviews t
