Cloakroom: Open-Source Layer That Masks Keys in .env and Logs Before Coding Agents See Them
Shanjeev · reddit · 2026-10-27
Agent CLIs like Claude Code, Codex CLI and Gemini CLI read everything in a project—including .env files, logs and support tickets—and send it to the model. Cloakroom runs hooks locally that swap keys, names, emails and addresses for placeholders before the model sees them, restoring real values when the agent writes files or runs commands.
A small detection model runs locally alongside the rules. Free, open source, no account. Known gaps: output from long-running commands requires an opt-in hold, and hosted web search isn't covered. The author invites feedback on what else is missing.
GitHub: https://github.com/shanjeevrajendran/cloakroom
More from coding & agent
- Cryptographer Matthew Green: coding agents make cache timing side-channel experiments nearly trivial — matthew_d_green · 2026-10-27
- Mitsuhiko Cleans Up the AI-Made Game He Built With His Kids — mitsuhiko · 2026-10-27
- 'Taste skills' are AI's biggest lie — code is commoditized, your eye is the moat — aryanXmahajan · 2026-10-27
- Agent Buddy: A Desk Gadget That Shows What Your Background AI Coding Agents Are Doing — DanWahlin · 2026-10-27
- kimo: open-source GUI-less video editor lets AI agents cut video via typed MCP tools and render frames to self-verify — LieTop7965 · 2026-10-27
- Weekend RAG turns into a full-time job; Stack Overflow's Stack Internal absorbs the cost — pchandrasekar · 2026-10-27