Swarm Leak Detector: Free Tool to Scan for Exposed API Keys in OpenClaw Configs
A developer running OpenClaw agents in production built a free tool to address a common security issue: API keys sitting in plaintext JSON files that any process on the machine can read.
What It Does
The tool, swarm-leak-detector, scans your configuration files for exposed credentials. It specifically looks for patterns matching over 21 different service providers including OpenAI, Anthropic, OpenRouter, and Stripe.
How to Use It
Run the scanner with this command:
npx swarm-leak-detector scan ~/.clawdbot/Key Features
- Zero dependencies
- MIT licensed
- Takes about 30 seconds to run
- Scans for 21+ credential patterns
- Specifically designed for OpenClaw/Clawdbot setups
Source and Availability
The tool is available on GitHub at https://github.com/5WARM-AI/swarm-leak-detector. The developer created it to solve their own problem of finding API keys in plaintext JSON files and is open to feedback from others running similar agent setups.
This type of security scanning tool is particularly useful for developers working with AI agents where API keys are frequently stored in configuration files and accidental exposure can lead to unauthorized access and unexpected charges.
📖 Read the full source: r/LocalLLaMA
👀 See Also
Eä: A SIMD Compiler for Python Written in Rust
A developer built Eä, a compiler for SIMD kernels in ~12k lines of Rust that generates shared libraries and Python wrappers from .ea files, achieving 6.6× speedups over NumPy without ctypes or build systems.
Flash-MOE Benchmark on M5 Max: 12.99 tok/s with Qwen3.5-397B
A benchmark of the 397-billion-parameter Qwen3.5 model running locally on a MacBook Pro M5 Max with 128GB RAM achieved 12.99 tokens per second using 4-bit quantization and cache-io-split 4, three times faster than the original 48GB benchmark.
Enhanced Claude Code Telegram Plugin Adds Voice, Stickers, Threading
A developer has released a fork of the official Claude Code Telegram plugin that adds voice message transcription via Whisper, sticker/GIF support, conversation threading, and emoji reactions. It's a drop-in replacement requiring only cloning, copying one file, and restarting.
Vellium Adds Desktop Pets and CLI-Inspired Agents for Local LLMs
Vellium, an open-source crossplatform app for local LLMs, now supports desktop pets that float above windows and agents with MCP integration, terminal commands, and file editing.