Skip to content

v0.25.0 — Shadow AI Detection for Repositories

Choose a tag to compare

View all tags
@Siddhant-K-code Siddhant-K-code released this 19 Apr 11:42
v0.25.0
b2ad0af

Shadow AI Detection for Repositories

agent-strace audit-tools scans a git repository for AI tool usage signatures — no network calls, no API keys required.

agent-strace audit-tools
agent-strace audit-tools --repo . --since "90 days ago" --approved cursor,copilot

Detected tools: Claude Code, Cursor, GitHub Copilot, Codex/ChatGPT, Windsurf, Aider — identified via file signals (.cursorrules, CLAUDE.md, .github/copilot-instructions.md, etc.) and commit message patterns.

What it flags:

  • Unapproved tools against a configurable --approved list
  • Unknown LLM API endpoints found in .env git history
  • PII patterns in recently committed files

Useful for security audits and compliance reviews where you need to know which AI tools have touched a codebase.

Assets 2
Loading