FullStack, Independent
Shipped: opencode-security-guard
An opencode plugin guarding the inference boundary: blocks and redacts secrets in 5 layers (prompts, history, system, tools, bash). 53 regex rules + entropy, cross-platform, zero deps, with a vault that rehydrates secrets locally, never exposing them.
Opencodeplugin






Comments1
Plenty of companies still won't let engineers use AI coding tools because they fear someone will paste a customer password or access key into one, so the security lead at those companies is probably your real buyer, not the individual developer. Keep the plugin free and charge teams for a simple monthly report showing how many secrets it caught and blocked, since that report is what gets a ban like that lifted.
1 comment
Plenty of companies still won't let engineers use AI coding tools because they fear someone will paste a customer password or access key into one, so the security lead at those companies is probably your real buyer, not the individual developer. Keep the plugin free and charge teams for a simple monthly report showing how many secrets it caught and blocked, since that report is what gets a ban like that lifted.