Privacy audit of content sent by programming intelligent agents
When using Claude Code or Codex to write code, you probably haven’t paid close attention to what data is being sent to the cloud. That’s exactly what shim-cli is designed for: it can be installed on your local machine and used alongside Claude Code, Codex, Copilot CLI, and VS Code. It scans the context data that the intelligent systems generate and identifies sensitive information such as API keys, passwords, phone numbers, or identification documents. In cases where it is allowed by the client’s settings, these sensitive details are directly encrypted before being sent.
It also keeps track of how much data was transmitted and how much money was spent during each Claude Code session, making it very convenient to conduct financial audits. Apache-2.0 is open-source and supports both macOS and Linux systems. It requires Python 3.10 or a later version, and can be easily installed with just one command using uv.
For teams that have strict requirements regarding the confidentiality of company code, it is advisable to install such tools before promoting the use of programming agents.