Swarm Leak Detector: Free Tool to Scan for Exposed API Keys in OpenClaw Configs
A developer running OpenClaw agents in production built a free tool to address a common security issue: API keys sitting in plaintext JSON files that any process on the machine can read.
What It Does
The tool, swarm-leak-detector, scans your configuration files for exposed credentials. It specifically looks for patterns matching over 21 different service providers including OpenAI, Anthropic, OpenRouter, and Stripe.
How to Use It
Run the scanner with this command:
npx swarm-leak-detector scan ~/.clawdbot/Key Features
- Zero dependencies
- MIT licensed
- Takes about 30 seconds to run
- Scans for 21+ credential patterns
- Specifically designed for OpenClaw/Clawdbot setups
Source and Availability
The tool is available on GitHub at https://github.com/5WARM-AI/swarm-leak-detector. The developer created it to solve their own problem of finding API keys in plaintext JSON files and is open to feedback from others running similar agent setups.
This type of security scanning tool is particularly useful for developers working with AI agents where API keys are frequently stored in configuration files and accidental exposure can lead to unauthorized access and unexpected charges.
📖 Read the full source: r/LocalLLaMA
👀 See Also
Outworked v0.3.0 adds iMessage support, built-in browser, and scheduling for Claude Code agents
Outworked v0.3.0 introduces iMessage channel support for agent communication, a built-in browser for web interaction, scheduling via cron, tunneling for local sharing, and enhanced MCP/Skills support. The desktop app orchestrates Claude Code agents as a team to handle coding tasks, web research, and automated workflows.
Local-first AI tax preparer with encrypted PII built on MCP
A developer built a tax filing extension for Crow that encrypts all PII with AES-256-GCM and works with any MCP-compatible client including Claude, ChatGPT, Gemini, or local models through Ollama. The system handles 1040, Schedule 1, HSA (8889), education credits (8863), self-employment (Schedule C/SE), and capital gains (Schedule D) calculations locally.
TasteBud Memory: Reversible Agent Memory via Hyperdimensional Computing
A 600-line Node.js tool uses hyperdimensional computing to build a reversible memory layer for AI agents, supporting lossless decode, drift detection, and unknown-project alerts.
NotebookLM MCP Structured: Free Server Connects Claude to NotebookLM with Automatic Prompt Structuring
A free MCP server called NotebookLM MCP Structured connects Claude Desktop to NotebookLM notebooks with automatic prompt structuring. The server restructures queries based on type (comparison, list, analysis, explanation, or extraction) and adds completeness checks and fidelity constraints.