Show HN: Stroq – a local audit of what your coding agent did and why

agybay_07

I've built project that helps to protect your computer from dangerous commands that your ai agent might execute. Have you noticed how often dont even check what our agents are actually running? Thats why I created Stroq. Try it locally npx @stroq/cli

hmokiguess

feature suggestion: background daemon that continuously scans and alerts in a menubar app when a positive match is found clicking the menubar app shows the offending entry, clicking the entry lets you redact, delete, repair, mark as false positive, etc.

maven29

You could cover a lot more adversarial scenarios with an ebpf backend. It needs linux, but with all the patches going around, you should be doing all your dev in a VM anyway. https://eunomia.dev/agentsight/

MakazhanAlpamys

homie lets keep building

q17

cool project! ...so is it pronounced, like, stroke? lol

sebion7125

I'm wondering if that could be part of a prompt injection warn system in the future. Did I get it right, that it does not need an LLM to evaluate sessions?

philips

I have been working on putting agents into full gVisor isolation with a default deny egress proxy that includes secret injections. When an agent tries to connect outbound, by default it suspends the gVisor, holds the proxy connection open, and lets the user choose. I am adding external judges now. But, there is a hypervisor key you press to deny/allow hosts without switching terminals. I just can't get behind relying on the harness tool boundry to protect me.

emscb

From the README, matching is text-level and nothing is sent out. So it seems to judge with rules, not an LLM. Is that right?

lhk931122

Doing it with a high-performance LLM would be best, but I think the token and time cost would be big, and just doing it code-based seems like it could work to some extent. But later, if LLM alignment gets good, it might not even be needed.

bill10

Interesting. How does it know: rule based, small model, or LLM? Anyway, like the mascot

Krishansubudhi

Like the owl. Add citations too.

Krishansubudhi

Is it fully programmatic ?