OpenLeash

sensitive-access

Catch agents reading secrets, printing env vars, or touching credential files.

By OpenLeash GitHub repo

What it does

Catch agents reading secrets, printing env vars, or touching credential files.

Permissions

event:readprompt:readtool:readmodel:invokedecision:writeaudit:writelog:writesignal:write