agybay_07
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Friday November 06, 2026 @06:47AM (#50391212)
its great that you're interested in this topic, good luck)
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Friday November 06, 2026 @01:14AM (#50388799)
Thank you. What do you mean by 'citations'? Each item has a 'Stroq show' feature that displays the basis for it
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Friday November 06, 2026 @01:12AM (#50388787)
Everything is performed programmatically, without using a model
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Thursday November 05, 2026 @11:43PM (#50388315)
Thanks, the owl's name is Hoo) Stroq reads sessions logs and command text directly from the computer. There are no LLM models involved
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Thursday November 05, 2026 @10:22PM (#50387776)
Yes, the rules dont catch everything but since this is an open-source project, anyone can add new rules, and I'll be looking for new approaches.
as for the llm, it reads the same text as the agent, so it can be fooled as well)
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Thursday November 05, 2026 @09:58PM (#50387617)
oh no, I hadn't made that connection until now lol
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Thursday November 05, 2026 @09:51PM (#50387554)
Yes, that’s correct. the rules already flag this kind of text
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Thursday November 05, 2026 @09:49PM (#50387537)
yes
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Thursday November 05, 2026 @03:49PM (#50384293)
to be honest, in the first scenario, the hook will only detect 'nom test' command itself. in the second scenario 'stroq inspect' will identify the hook before the folder is opened and issue a warning. thanks for these examples :) I'll use them to improve product
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Thursday November 05, 2026 @01:23PM (#50382508)
You’re right
the command from my comment only generates a report and doesn’t actually prevent anything. stroq init sets up hooks that prompt for confirmation before a dangerous command is executed—but that’s a filter, not a sandbox
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Thursday November 05, 2026 @11:58AM (#50381466)
Thanks) good idea
Re:Show HN: Stroq – a local audit of what your coding agent did and why
on Thursday November 05, 2026 @11:03AM (#50380839)
I've built project that helps to protect your computer from dangerous commands that your ai agent might execute. Have you noticed how often dont even check what our agents are actually running? Thats why I created Stroq.
Try it locally npx @stroq/cli
Re:Show HN: Check your Claude Code, Codex and Cursor sessions for secrets
on Tuesday October 13, 2026 @12:59PM (#50074936)
find sessions for secrets
would love to your feedback :)
Show HN: Check your Claude Code, Codex and Cursor sessions for secrets
Re:Show HN: Rdltr – Inbox zero for your reading list
on Wednesday September 09, 2026 @03:12PM (#49632445)
I read through the Privacy Policy and noticed that the text of an article can be sent to an external AI service. Just wondering, will there be some kind of preview or confirmation before the content is actually sent? I’m particularly curious about this for internal or private pages, since those might contain information that shouldn’t be shared externall