Stroq - Local audit and guard for AI coding agent sessions

Show HN: Stroq – a local audit of what your coding agent did and why

Stroq is an open-source local security platform for AI coding agents like Claude Code, Cursor, and Codex CLI. It reads your last 30 days of sessions to show how many commands came from text your agent read and which keys left your machine—printing key names, never values. Hooks then judge every tool call before it runs, denying curl | sh and outbound calls carrying known secrets, and asking first when a command repeats text the agent read. No account, no telemetry, nothing sent. Run npx @stroq/cli to get your own session card, or replay old sessions without installing anything.