Show HN: Heldkeys, see which credentials your AI coding agent can reach

Category: security

Tags: security, ai-agents, cli-tool, credential-scanning, rust

Score: 6.5/10 (Innovation: 6, Technical: 7, Documentation: 8, Utility: 5)

heldkeys is a Rust CLI that scans the local environment, configuration files, and CI workflows to enumerate all credentials an AI coding agent could access, without ever printing secret values. It also audits GitHub Actions for agent-related risks and inspects sandboxes/containers from within. The project fills a gap in agent security by focusing on pre-existing credentials rather than committed secrets.

Target audience: security engineers, backend developers, devops

Repository: https://github.com/hugomn/heldkeys · Rust · MIT · 6 stars

View on Hacker News