Assessment
One command. Every AI coding session on this machine.
skarn assess scans every AI coding session on one machine and prints a redacted risk summary. It needs no account, no license, and no configuration, and the scan makes no network call.
With nothing installed
npx @skarn-security/[email protected] assess
With Skarn installed
skarn assess
What the summary prints
A risk score
One number from 0 to 100 for the machine.
Findings by severity
Counts of critical, high, medium, and low findings.
The top exposures, redacted
Each line carries the severity, the kind of credential, a masked value, and the project.
The top attack chain
The steps of the top correlated chain and its depth.
[==] SKARN
AI coding session security scanner
free edition - getskarn.com/editions
Skarn scanned your AI coding sessions
5 session(s), 14 KB - recent window
Risk score: 83/100 (high)
Findings: 6 critical, 14 high, 0 medium, 0 low
Attack chains: 1 (top: recon -> exfiltrate -> poison, depth 3)
Top exposures (redacted):
CRITICAL AWS secret access key exposed in session [v****Xn] - virtucon-billing
CRITICAL AWS secret access key exposed in session [w****EY] - acme-billing-api
CRITICAL Encoded data piped to network command (base64, xxd, python, perl, ruby) [b****rl] - contoso-scraper
HIGH Identified a pattern that may indicate AWS credentials, risking unauthorized cloud resource access and data breaches on AWS platforms. [A****BY] - virtucon-billing
HIGH Detected a Generic API Key, potentially exposing access to various services and sensitive operations. [A****BY] - virtucon-billing
... and 9 more (skarn check for the full list)
Rotate any live credentials above. Full detail: skarn check. Block future leaks: skarn guard.
Share a redacted report: skarn assess -o report.html
Recorded over a synthetic demo corpus, scoped to two hours of one assistant. Plain skarn assess scans every session on the machine. Add -o report.html to keep the full report.