ranwhat

About

ranwhat reads the local history of AI coding agents such as Claude Code, Codex and Gemini CLI and reports risky actions, for example credential file reads, forced Git pushes, bulk deletions and package publishes. It also finds secrets left in that history and scores the credentials agents can reach. Everything runs on the user's machine with no telemetry, and results can be exported as SARIF for code scanning. A local tier is free and a paid plan adds server-side features.