hnagent-security
heldkeys: list credentials your coding agent can reach
Read-only CLI that inventories env/CLI/.env/MCP/SSH/cloud logins an agent inherits on laptop, sandbox, or CI—and flags risky agent steps in GitHub Actions—without printing secret values.
heldkeysClaude CodeCodex+2