danieltamas/cloak
Protect .env secrets from AI coding agents. CLI (Rust) + VS Code extension. AES-256-GCM vault, OS keychain, Touch ID, smart sandbox values. Agents see fakes — you see the real ones.
It encrypts `*.env` files, replacing real secrets with structurally valid sandbox values on disk. A VS Code extension automatically decrypts and displays real values within the editor, while a Rust CLI handles runtime environment variable injection for applications and provides an authentication gate using OS keychain and Touch ID/password. This local-only system generates a human-readable recovery key and hashes CLI passwords with PBKDF2-SHA256.
Stars
3
Forks
—
Language
Rust
License
MIT
Category
Last pushed
Mar 18, 2026
Commits (30d)
0
Get this data via API
curl "https://pt-edge.onrender.com/api/v1/quality/agents/danieltamas/cloak"
Open to everyone — 100 requests/day, no key needed. Get a free key for 1,000/day.
Higher-rated alternatives
quantifylabs/aegis-memory
Secure context engineering for AI agents. Content security · integrity verification · trust...
kahalewai/dual-auth
Dual-Auth provides AGBAC dual-subject Authorization for AI Agents and Humans using existing IAM...
The-17/agentsecrets
Zero-knowledge secrets infrastructure built for AI agents to operate, not just consume.
lelu-auth/lelu
The authorization layer for AI Agents
onecli/onecli
Open-source credential vault, give your AI agents access to services without exposing keys.