agentprint 0.1.0

The security check your AI coding agent runs for you.

uvx agentprint
npx agentprint-cli

_{Works inside: Claude Code · Codex · Cursor · Gemini CLI · Windsurf · Devin · OpenCode · Copilot · Hermes · Antigravity}

Docs · Get started · Checks · Use in CI

Why

• Agent files leak into packages. In April 2026 Lakera reported that of about 46,500 npm packages it scanned, 428 shipped .claude/settings.local.json, and 33 files in 30 packages held credentials.
• We measured it too. Our pilot scan (5 November 2026, counts only) of the newest 1,976 npm packages and 1,997 PyPI releases found agent files in 2.1% of npm packages and 9.2% of PyPI releases. 1 npm and 6 PyPI packages shipped files that should never ship. No key-shaped strings turned up inside those agent files.
• History files keep what you paste. Agents save prompts as plain text in your home folder. A June 2026 Hermes Agent advisory (CVE-2026-53870) covers such files being created readable by every user on the machine.

Quickstart

uvx agentprint scan      # sweep this machine and folder (keys masked)
uvx agentprint fix       # make the safe fixes; shows the plan and asks first
uvx agentprint install   # arm each agent it finds with the tripwire
uvx agentprint pack      # preflight: what your package would publish

Get started has the details, including running from a clone of this repo.

What it checks

Keys are found by pattern (Anthropic, OpenAI, GitHub, AWS, Stripe, Slack and Google formats, plus a generic "secret-looking name = random-looking value" rule) and are never used or sent anywhere.

Inside your AI agent

• A hook runs before the agent publishes a package or runs git push, and checks what would go out.
• An MCP server gives the agent tools to check on its own.
• If something would leak, the agent gets a brief: the fix steps, plus what to ask you (rotate a key).
• It only ever blocks (BLOCK or CLEAR); your agent's own approval rules still apply.
• agentprint uninstall takes out exactly what install added.

Details: Inside your agent.

More

Agents · Use in CI · Privacy · Comparison · Census · How it works

Contributing · Security · License (MIT)

Built with Python 3.11+, uv, typer, rich, the MCP Python SDK, pytest and ruff; docs with Astro Starlight.