← All work

Local security tool · Research prototype

Local AI Security Assistant

Inspect first. Authorize with context.

Find possible credentials scattered across project files, with priorities, locations, and reasons that give a human review a clear starting point.

Concept illustration for the Local AI Security Assistant, not an application screenshot; no real project findings are shown.
Concept illustration for the Local AI Security Assistant, not an application screenshot; no real project findings are shown.

About the project

As AI coding projects multiply, credentials can end up in configuration, examples, and documentation. This local extension brings directory scanning into a credential-management workspace: identify places worth reviewing, then let a person decide what they mean and what to do.

What you can do

  1. Scan a chosen local project and review high-priority candidates, items to check, and reference items.
  2. Read file locations, classification reasons, and static references within the project without displaying credential values.
  3. Follow scan progress and retain partial findings when stopping.

Where it stands

A local prototype. The scanning engine and its integration have been exercised with synthetic files. The updated window’s complete interaction flow still needs observation; there is no public download. A candidate does not establish that a credential is valid, in use, or exposed.

Extends sudoHG’s open-source AskKey (MIT) with local directory scanning and candidate review. The upstream credential manager is not my original work.