git404hub

what is agent-audit fr?

laisrast/agent-audit — explained in plain English

Analysis updated 2026-05-18

0TypeScriptAudience · developerComplexity · 2/5Setup · easy

tl;dr

A command line tool that scans AI coding agent session logs for risky actions like dangerous commands or sensitive file access, using deterministic rules.

vibe map

mindmap
  root((AgentAudit))
    What it does
      Reviews agent session logs
      Matches tool calls to rules
      Flags risky actions
    Tech stack
      TypeScript
      CLI
      JSON rules
    Use cases
      Audit a Claude Code session
      Block dangerous commands
      Customize project rules
    Audience
      Developers
      Security teams

Code map

Detail Auto

An interactive map of this repo's files and how they connect — its source is parsed live in your browser. Click Visualize to build it.

filefunction / class

what do people make with this?

VIBE 1

Check a past Claude Code session for risky commands or sensitive file access.

VIBE 2

Fail a script or CI check when a session hits a critical severity finding.

VIBE 3

Add a custom rule to flag access to a specific secret file in a project.

VIBE 4

Disable a built-in rule that produces false positives for a team's workflow.

what's the stack?

TypeScriptCLIMake

how it stacks up fr

laisrast/agent-audit0xradioac7iv/tempfs52191314/web-agent-proxy-sdk
Stars000
LanguageTypeScriptTypeScriptTypeScript
Setup difficultyeasymoderatemoderate
Complexity2/53/54/5
Audiencedeveloperdeveloperdeveloper

Figures from each repo's GitHub metadata at analysis time.

how do i run it?

Difficulty · easy time til it works · 5min

Currently only supports auditing Claude Code sessions, other agent adapters are not yet built.

The README does not state a license for this project.

in plain english

AgentAudit is a command line tool that reviews the actions taken by an AI coding assistant during a session, checking for anything that looks risky from a security standpoint. When you use an AI agent like Claude Code to help write software, that agent reads files, edits files, runs shell commands, and sometimes reaches out to external services. AgentAudit looks back over a recorded session and checks each of those actions against a set of rules to flag things like touching a sensitive file, running a dangerous command, or making an unexpected outside connection. The README notes this is an early prototype and things may change. Importantly, the tool does not use any AI itself to do this checking, and it makes no network calls. It works entirely by comparing the recorded actions against pattern rules, using simple text matching or regular expressions, which makes its results predictable and repeatable every time you run it. Right now it only knows how to read session files from Claude Code, though the design allows for supporting other AI coding tools later. You install it by cloning the repository and running a couple of make commands, which builds the tool and links it into your local command path. Once installed, you can run it to analyze your most recent AI coding session, list all the sessions available on your machine, or check which rules and settings are currently active. Rules can be turned off, adjusted in severity, or added on top of the built in ones, either globally for your whole computer or scoped to a single project using a simple JSON configuration file. This is aimed at developers and teams who want a lightweight, automated way to double check what an AI coding assistant actually did during a session before trusting that work.

prompts (copy fr)

prompt 1
Walk me through installing AgentAudit and running it on my latest Claude Code session.
prompt 2
Show me how to write a custom rule that flags a sensitive file in my project.
prompt 3
Explain the difference between global rules and project rules in AgentAudit.
prompt 4
Help me set up AgentAudit to fail a CI job on critical severity findings.

Frequently asked questions

what is agent-audit fr?

A command line tool that scans AI coding agent session logs for risky actions like dangerous commands or sensitive file access, using deterministic rules.

What language is agent-audit written in?

Mainly TypeScript. The stack also includes TypeScript, CLI, Make.

What license does agent-audit use?

The README does not state a license for this project.

How hard is agent-audit to set up?

Setup difficulty is rated easy, with roughly 5min to a first successful run.

Who is agent-audit for?

Mainly developer.

peek the repo → explain another one

This repo across BitVibe Labs

double-check against the repo, no cap.