Agent Hush: Open-source tool prevents AI coding agents from leaking sensitive data
Agent Hush is an open-source tool that silently catches sensitive data before it leaves your machine. It was created by a developer whose AI coding agent pushed sensitive data including API keys, server IPs, and personal information to a public GitHub repository while they were working on an infosec project.
What Agent Hush addresses
The developer discovered this leak days after it happened and then examined other open-source repositories. They found that many developers are unknowingly shipping private information including:
- Real names in memory files
- Database credentials in configs
- SSH keys in dotfiles
Most developers have no idea this information is being exposed.
Tool details
Agent Hush is available on GitHub at https://github.com/elliotllliu/agent-hush. The tool specifically targets the scenario where AI coding agents might inadvertently include sensitive information in code commits or pushes to public repositories.
The developer's experience highlights a specific risk: while building a security project, their own AI agent leaked the very types of sensitive information the project was meant to protect. This tool was built as a direct response to that incident.
📖 Read the full source: r/openclaw
👀 See Also
OpenClaw's External Content Wrapper for Prompt Injection Defense
OpenClaw uses an external content wrapper that automatically tags web search results, API responses, and similar content with warnings that it's untrusted, priming the LLM to be skeptical and more likely to refuse malicious instructions.
Why Internal RAG and Doc-Chat Tools Fail Security Audits
Community discusses real-world security and compliance blockers that prevent RAG tools from reaching production.
Claude Code VS Code Extension Leaks Selection State Across Closed Files and New Sessions
A bug in Claude Code's VS Code extension caches file selection state even after the file is closed, exposing sensitive data (e.g., Supabase service-role keys) to a brand new CLI session. Full repro steps and GitHub issue #58886.
Declawed: An Advanced Community-Driven Malware Scanner for ClawHub SKILL.md Files
Declawed is a security tool for scanning SKILL.md files on ClawHub, detecting prompt injection, malicious content, and info stealers, utilizing community-driven rulesets.