HN Showcase
Back to browse
GitHub Repository

Chrome extension that masks secrets & sensitive data before pasting into AI chats. Works with ChatGPT, Claude, Gemini & more. 100% local, privacy-first.

6 starsJavaScript

Secret Sanitizer – auto-masks secrets when you paste into AI chats

by souvikghosh957·Feb 22, 2026·1 point·0 comments
Visit ProjectView on HN

AI Analysis

●●●BangerSolve My ProblemSlick

Intercepts pastes, masks 30+ secret types locally—zero network requests or tracking.

Strengths
  • •Solves a real friction point: developers accidentally leaking API keys to ChatGPT daily.
  • •Local regex + AES-256 encryption means no trust required; audit the code directly.
  • •Supports ChatGPT, Claude, Gemini, and custom sites—broad coverage without vendor lock-in.
Weaknesses
  • •Pattern-based detection can miss context-specific secrets or produce false positives.
  • •Chrome extension only; no Firefox, Safari, or multi-browser support yet.
Category
Security
Target Audience

Developers debugging code in AI chats

Similar To

1Password's watchtower alerts · GitGuardian · detect-secrets CLI tool

Post Description

I kept pasting code with hardcoded API keys, database credentials, and auth tokens into ChatGPT while debugging. Copy a failing function, paste it into AI, and realise your AWS secret key or Stripe token was right there in the snippet.

So I built (with some help from Claude) a simple Chrome extension that intercepts the paste, detects secrets using local regex, and replaces them with [MASKED] before they reach the chat. Originals stay in a local AES-256 encrypted vault for unmasking.

No servers. No network requests. No tracking. ~41 KB, zero dependencies. Don't take my word for it: 'grep -r "fetch\|XMLHttpRequest" content_script.js' returns nothing.

Works on ChatGPT, Claude, Gemini, Grok, Perplexity, DeepSeek, and any custom site you add. Supports 30+ patterns — AWS keys, GitHub tokens, JWTs, Stripe keys, database URLs, private keys, and more. You can toggle individual patterns off for false positives.

Open source, MIT licensed. With the recent news about extensions harvesting AI conversations, I figured more devs could use this.

Would love feedback — especially on patterns I might be missing or edge cases you hit.

Similar Projects