83 points30 comments
Stroq audits AI coding agents locally, stops dangerous commands
What is Stroq – a local audit of what your coding agent did and why?
Stroq scans the last 30 days of Claude Code, Cursor and Codex sessions on your machine, showing which commands came from text the agent read and which keys were accessed. It also hooks into these agents to block unsafe actions like `curl | sh` or outbound calls that would leak known secrets, all without sending any data off-site.
Who it is for
Developers who rely on AI coding assistants should run Stroq to keep their code and credentials safe, and it can be activated with a single local command.
How to try it
npx @stroq/cli