About this tool

ranwhat is an open-source command-line tool for AI agent security that audits what coding agents like Claude Code and Codex actually ran, the secrets they leaked to disk, and the permissions their tokens still carry. It reads agent transcripts locally, surfacing irreversible actions and plaintext credentials without transmitting anything. Install with a single command and run a read-only check in seconds.