https://github.com/chaluvadis/safe-to-send
safe-to-send is a minimal VS Code extension to scan selected code (or full file) for sensitive data before copying for manual AI usage.
https://github.com/chaluvadis/safe-to-send
agent-skills agents ai clipboard security sensitive-data typescript utilities utility vscode-extension
Last synced: 20 days ago
JSON representation
safe-to-send is a minimal VS Code extension to scan selected code (or full file) for sensitive data before copying for manual AI usage.
- Host: GitHub
- URL: https://github.com/chaluvadis/safe-to-send
- Owner: chaluvadis
- License: mit
- Created: 2026-04-23T05:07:54.000Z (3 months ago)
- Default Branch: main
- Last Pushed: 2026-04-28T07:41:32.000Z (3 months ago)
- Last Synced: 2026-04-28T09:29:14.232Z (3 months ago)
- Topics: agent-skills, agents, ai, clipboard, security, sensitive-data, typescript, utilities, utility, vscode-extension
- Language: TypeScript
- Homepage: https://marketplace.visualstudio.com/items?itemName=chaluvadis.safe-send
- Size: 223 KB
- Stars: 0
- Watchers: 0
- Forks: 0
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- License: LICENSE
- Code of conduct: CODE_OF_CONDUCT.md
Awesome Lists containing this project
README
# Safe Send
[](https://marketplace.visualstudio.com/items?itemName=nomad-in-code.safe-send)
[](https://opensource.org/licenses/MIT)
**Safe Send** prevents accidental leakage of sensitive data when copying code to AI tools. It scans for secrets (API keys, passwords, tokens) and sanitizes them before they reach your clipboard.
---
## 🚀 Quick Start
1. **Install** from VS Code Extensions (`Ctrl+Shift+X` → Search "Safe Send")
2. **Select code** in your editor
3. **Right-click** → **"Safe Send: Scan & Copy for AI"**
4. **Review results** → Copy safely!
---
## 🔍 What It Does
### Detects 9 Types of Secrets
| Type | Example | Replaced With |
|------|---------|---------------|
| OpenAI Keys | `sk-1234...` | `` |
| AWS Keys | `AKIA...` | `` |
| GitHub Tokens | `ghp_...` | `` |
| JWT Tokens | `eyJhbGc...` | `` |
| Private Keys | `-----BEGIN...` | `` |
| IP Addresses | `192.168.1.1` | `` |
| Emails | `user@domain.com` | `` |
| Passwords | `password = "secret"` | `` |
| Anthropic Keys | `sk-ant-...` | `` |
### Risk Levels
- 🟢 **LOW** (0-29): No warning (emails, IPs)
- 🟡 **MEDIUM** (30-59): Warning (passwords)
- 🔴 **HIGH** (60-100): Warning (API keys, tokens)
---
## 💻 Usage Examples
### Example 1: Clean Code → Auto Copy
```javascript
// Before: No secrets detected
const greeting = "Hello World";
```
✅ **Result**: Copied automatically (no warning)
---
### Example 2: Secret Detected → Warning
```javascript
// Before: Contains API key
const apiKey = "sk-1234567890abcdef";
```
⚠️ **Dialog appears**:
- Risk: 60/100 (HIGH)
- Detected: OpenAI API key
- Options: **Sanitize & Copy** | Copy Anyway | Cancel
✅ **After Sanitizing**:
```javascript
const apiKey = "";
```
---
### Example 3: Multiple Secrets
```javascript
// Before: Multiple secrets
const config = {
apiKey: "sk-1234567890",
password: "secret123",
email: "admin@company.com"
};
```
⚠️ **Risk**: 100/100 (HIGH - maximum)
✅ **After**:
```javascript
const config = {
apiKey: "",
password: "",
email: ""
};
```
---
## 📸 Screenshots
See **[SCREENSHOTS.md](SCREENSHOTS.md)** for visual examples of:
1. ✅ Clean code copy (no secrets)
2. ⚠️ Single secret warning
3. ⚠️ Multiple secrets warning
4. 🧼 Sanitized output
5. 🔒 Status bar indicators
6. ⚙️ Settings configuration
7. 📋 Ignore for file feature
8. 📋 Clipboard monitoring
9. 📂 Path-based risk adjustment
10. 🎨 Command palette access
---
## ⚙️ Configuration
### Custom Patterns
Add your own detectors in VS Code Settings:
```json
{
"safeSend.customPatterns": [
{
"id": "company_key",
"label": "Company Key",
"regex": "COMPANY_[A-Z0-9]{24}",
"placeholder": "",
"riskScore": 60,
"critical": true
}
]
}
```
### Repository Config
Create `.safe-send.json` in your project:
```json
{
"patterns": [
{
"id": "internal_token",
"label": "Internal Token",
"regex": "INTERNAL_[A-Z0-9]{32}"
}
]
}
```
---
## 🛠️ Commands
| Command | Shortcut |
|---------|----------|
| Scan & Copy | `Ctrl+Shift+P` → "Safe Send" |
| Context Menu | Right-click in editor |
| Settings | `Ctrl+,` → Search "Safe Send" |
---
## 🔄 Clipboard Monitoring
Safe Send automatically monitors your clipboard:
- ✅ Scans every 200ms
- ✅ Warns for MEDIUM/HIGH risk
- ✅ Ignores LOW risk (emails, IPs)
- ✅ Never blocks clipboard
**Disable in Settings**: `safeSend.clipboard.monitor`
---
## 📊 Quality Metrics
| Metric | Value |
|--------|-------|
| Tests Passing | 80/80 ✅ |
| Test Coverage | 100% |
| Compile Errors | 0 |
| Breaking Changes | 0 |
| Lines of Code | 7,484 |
---
## 🚀 Quick Commands
```bash
# Install locally
npm run install:local
# Remove local install
npm run remove:local
# Run tests
npm test
# Build
pnpm run build
```
---
## 🔒 Safety & Privacy
- ✅ No data collection
- ✅ No network access
- ✅ 100% offline
- ✅ Open source (MIT)
- ✅ Max 200KB file size
---
## 📚 Documentation
- **[Architecture](docs/ARCHITECTURE.md)** - Technical design
- **[Test Scenarios](docs/Test_Data.md)** - 100+ examples
- **[User Guide](docs/USER_TESTING_GUIDE.md)** - Testing instructions
- **[QA System](reports/IMPLEMENTATION_SUMMARY.md)** - Autonomous testing
---
## 💻 Development
```bash
# Setup
git clone https://github.com/chaluvadis/safe-send-to-ai.git
cd safe-to-send
pnpm install
pnpm run dev:setup
```
---
Stay safe. Sanitize before you share.
---