Your coding agent just read your API keys. I built a local check so they don't reach the model

说明与用途

Torana 的 pii 插件使用本地模型扫描工具输出，在将敏感信息发送到云端 LLM 之前进行拦截。

问题

Coding agents can inadvertently expose API keys or passwords to hosted LLMs when they include file contents in requests.

结果

The local scanner blocks 60 of 60 sensitive outputs while allowing most harmless outputs, with some false positives and false negatives depending on model and prompt.

工作流

• 1. Agent reads file or runs tool.
• 2. Output sent to Torana’s pii plugin.
• 3. Plugin forwards output to a local model (e.g., Qwen2.5‑3B‑Instruct).
• 4. If model flags API key/password/PII, plugin replaces result with a short explanation.
• 5. Agent receives sanitized response and can retry with narrower scope.

证据

I built it as a plugin for Torana, an open‑source, local‑first proxy that sits between your coding agent and its model provider.

来源

If the model flags an API key, password or private personal data, the plugin replaces the whole tool result with a short explanation.

来源

I compared seven local chat models and several specialised detectors on 60 sensitive and 60 harmless synthetic examples.

来源

Scanning adds about a second per tool result, and large outputs that don't fit the model's context are blocked as scan failures.

来源