laisrast/agent-audit — explained in plain English
Analysis updated 2026-05-18
Check a past Claude Code session for risky commands or sensitive file access.
Fail a script or CI check when a session hits a critical severity finding.
Add a custom rule to flag access to a specific secret file in a project.
Disable a built-in rule that produces false positives for a team's workflow.
| laisrast/agent-audit | 0xradioac7iv/tempfs | 52191314/web-agent-proxy-sdk | |
|---|---|---|---|
| Stars | 0 | 0 | 0 |
| Language | TypeScript | TypeScript | TypeScript |
| Setup difficulty | easy | moderate | moderate |
| Complexity | 2/5 | 3/5 | 4/5 |
| Audience | developer | developer | developer |
Figures from each repo's GitHub metadata at analysis time.
Currently only supports auditing Claude Code sessions, other agent adapters are not yet built.
AgentAudit is a command line tool that reviews the actions taken by an AI coding assistant during a session, checking for anything that looks risky from a security standpoint. When you use an AI agent like Claude Code to help write software, that agent reads files, edits files, runs shell commands, and sometimes reaches out to external services. AgentAudit looks back over a recorded session and checks each of those actions against a set of rules to flag things like touching a sensitive file, running a dangerous command, or making an unexpected outside connection. The README notes this is an early prototype and things may change. Importantly, the tool does not use any AI itself to do this checking, and it makes no network calls. It works entirely by comparing the recorded actions against pattern rules, using simple text matching or regular expressions, which makes its results predictable and repeatable every time you run it. Right now it only knows how to read session files from Claude Code, though the design allows for supporting other AI coding tools later. You install it by cloning the repository and running a couple of make commands, which builds the tool and links it into your local command path. Once installed, you can run it to analyze your most recent AI coding session, list all the sessions available on your machine, or check which rules and settings are currently active. Rules can be turned off, adjusted in severity, or added on top of the built in ones, either globally for your whole computer or scoped to a single project using a simple JSON configuration file. This is aimed at developers and teams who want a lightweight, automated way to double check what an AI coding assistant actually did during a session before trusting that work.
A command line tool that scans AI coding agent session logs for risky actions like dangerous commands or sensitive file access, using deterministic rules.
Mainly TypeScript. The stack also includes TypeScript, CLI, Make.
The README does not state a license for this project.
Setup difficulty is rated easy, with roughly 5min to a first successful run.
Mainly developer.
This repo across BitVibe Labs
double-check against the repo, no cap.