Stroq

Stroq locally audits what coding agents do

Open-source tool Stroq reads Claude Code and Codex session logs to show how many commands originated from text an agent read, and which key names left the machine (never values). It runs via npx with only a local cache and no telemetry, and can guard agents or replay known attacks.