Unspill
A local CLI credential-scanning tool written in Go that reads the local conversation history files of AI coding assistants, identifies leaked sensitive credentials through pattern matching, and displays the results in redacted form; it guarantees zero network requests.
Timeline (last 90 days)
Unspill is a Go language CLI tool for scanning the local history records of AI coding assistants such as Copilot CLI, Claude Code, and Codex to find leaked credentials.
Unspill's core design principle is local operation with zero network requests.
Unspill redacts sensitive values found in scan reports and does not echo credential values in full.
Unspill explicitly reports a status of "unable to fully scan" rather than silently skipping unparseable formats.
Unspill's current format support coverage is limited, and the author candidly states that format support is still in progress.
The author provided a demo repository containing fake credentials in a Reddit post so users can experience the tool without exposing their real history.
Unspill's pattern-matching scanning approach may produce false negatives and false positives, making it better suited as a quick self-check line of defense rather than a replacement for a complete key management solution.
All Facts (7)
Unspill is a Go language CLI tool for scanning the local history records of AI coding assistants such as Copilot CLI, Claude Code, and Codex to find leaked credentials.
50%UnverifiedUnspill's core design principle is local operation with zero network requests.
50%UnverifiedUnspill redacts sensitive values found in scan reports and does not echo credential values in full.
50%UnverifiedUnspill explicitly reports a status of "unable to fully scan" rather than silently skipping unparseable formats.
50%UnverifiedUnspill's current format support coverage is limited, and the author candidly states that format support is still in progress.
50%UnverifiedThe author provided a demo repository containing fake credentials in a Reddit post so users can experience the tool without exposing their real history.
50%UnverifiedUnspill's pattern-matching scanning approach may produce false negatives and false positives, making it better suited as a quick self-check line of defense rather than a replacement for a complete key management solution.
50%