Maskara — Development skill for Claude Code


Maskara

[](https://github.com/mrgoonie/maskara/actions/workflows/ci.yml)

Maskara is an offline CLI for scanning coding-agent session logs, finding sensitive values, redacting local copies, and producing a rotation report.

Name meaning: `maskara` mixes `mascara` and `mask`. If you do not want to cry your mascara away after leaking secrets into agent conversations, mask them.

Install

go install github.com/mrgoonie/maskara/cmd/maskara@latest

Or download a release binary from GitHub Releases.

Usage

# full workflow: scan, redact with backups, and write a Markdown report
maskara

# print version
maskara --version
maskara -v

# scan only
maskara scan

# scan only Codex logs
maskara scan --agent codex
maskara scan -a codex

# scan Gemini CLI logs from a custom directory
maskara scan --agent gemini --root /path/to/logs

# scan and report
maskara report

# JSON report
maskara report --json

# write report to a file or directory
maskara report --output /path/to/file.md
maskara report -o /path/to/reports/

# install coding-agent guardrails
maskara guardrails
maskara guardrails -a claude
maskara guardrails -a codex
maskara guardrails --dry-run

`maskara` with no subcommand runs the full workflow: scan, redact, and report. Redaction creates `*.maskara.bak` backups before rewriting files.

How it works

flowchart TD
    Command["maskara command"] --> Mode{"Subcommand"}
    Mode -->|"scan, report, or default"| Targets["Resolve agent targets
auto, all, --agent, --root"]
    Targets --> Scanner["Walk local files
skip binary and oversized files"]
    Scanner --> Detector["Detect secret patterns"]
    Detector --> Findings["Create masked findings
preview and SHA-256 fingerprint"]
    Findings --> Report["Write Markdown or JSON report"]
    Findings -->|"default workflow only"| Redact["Backup