3 ms·
After the Mercor breach, I built a local secret scanner for AI-generated code
- jricramc 7mo ago[dead]
- jricramc 7mo agoHere's a walkthrough of how it works: https://screen.studio/share/kfozpfSg https://screen.studio/share/kfozpfSg
- jeremie_strand 7mo ago[dead]
- JSR_FDED 7mo agoWhat is the exact threat being addressed here? If the proxy detects a sensitive key and then places it in a .env file, Claude code would pull the value from the env file and then still send it to Anthropic servers wouldn’t it?
- jricramc 7mo agoCorrect, it doesn't protect against a malicious LLM actor, but rather places guardrails on the developer as well as the agent.