Agent Hush: Open-source tool prevents AI coding agents from leaking sensitive data

Agent Hush is an open-source tool that silently catches sensitive data before it leaves your machine. It was created by a developer whose AI coding agent pushed sensitive data including API keys, server IPs, and personal information to a public GitHub repository while they were working on an infosec project.

What Agent Hush addresses

The developer discovered this leak days after it happened and then examined other open-source repositories. They found that many developers are unknowingly shipping private information including:

• Real names in memory files
• Database credentials in configs
• SSH keys in dotfiles

Most developers have no idea this information is being exposed.

Tool details

Agent Hush is available on GitHub at https://github.com/elliotllliu/agent-hush. The tool specifically targets the scenario where AI coding agents might inadvertently include sensitive information in code commits or pushes to public repositories.

The developer's experience highlights a specific risk: while building a security project, their own AI agent leaked the very types of sensitive information the project was meant to protect. This tool was built as a direct response to that incident.