# ghuntley/preflight

> A local Rust proxy that intercepts LLM requests and attachments, scans them for secrets (keys, tokens) and redacts or blocks them before they reach the model. Aimed at coding-agent users who want to avoid leaking credentials via source files, screenshots or PDFs.

- Magnitude: 0.7 out of 10 — Cooling
- Stars: 76 total · +0 stars today, ≈ 2 by evening
- Star trust: star growth looks organic
- Category: Security · Language: Rust · License: MIT · Created: 2026-09-20 · Last push: 2026-09-20
- GitHub: https://github.com/ghuntley/preflight · Page: https://gitnova.dev/en/r/ghuntley/preflight

## Useful for

- Place the proxy between a coding agent and the model to strip keys from prompts automatically
- Scan screenshots and PDFs for secrets via local OCR before sending them to the model
- Enable no-go mode so requests with detected secrets are blocked with HTTP 409

## Why it’s here

- 0 stars so far today, about 2 expected by the end of the day.
- The repository is 5 days old and already has 76 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet.

## Star trust

Star growth looks organic.

Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer.

## Numbers

- Forks: 8
- Issues and pull requests: 1
- Watchers: 0
- Average over the last week: 13 per day
- Usual pace: too little history (under two weeks)
- Stars in the last hour (measured): 0

## Stars per day, last 6 days (oldest → newest, today is partial)

2026-09-20 … 2026-09-25: 34, 31, 6, 3, 2, 0

## More in this category

1. **glaz-boga-poisk-bot/glaz-boga** — 6.6 · Early signal · Security · +0 stars today, ≈ 189 by evening
   Telegram bot for OSINT lookups: given a phone number, email, username, name or Telegram ID it returns matches from open, archived and leaked records. Matches depend on what is in the database.
   Full card: https://gitnova.dev/en/r/glaz-boga-poisk-bot/glaz-boga.md
2. **christianrowlands/wavedigger** — 5.7 · Early signal · Security · TypeScript · +0 stars today, ≈ 70 by evening
   Web app that looks up the approximate location of Wi-Fi access points by BSSID and LTE/5G NR cell towers by network parameters via Apple's public WLOC API, with map visualization.
   Full card: https://gitnova.dev/en/r/christianrowlands/wavedigger.md
3. **mvt-project/mvt** — 5.4 · Breakout · Security · Python · +0 stars today, ≈ 164 by evening
   A collection of mobile forensics utilities that gather and analyze traces of compromise on Android and iOS devices, matching them against public indicators of compromise (IOCs). Built by Amnesty International Security Lab for…
   Full card: https://gitnova.dev/en/r/mvt-project/mvt.md
4. **angusdevgo/Seep-Reverse-Lab** — 5.3 · Early signal · Security · Python · +0 stars today, ≈ 77 by evening
   Agent-native reverse engineering workbench for binaries and CWE-602 client-side authorization auditing: unifies Radare2, JADX, Apktool, Frida and IDA via 23 MCP tools with automatic task routing.
   Full card: https://gitnova.dev/en/r/angusdevgo/Seep-Reverse-Lab.md
5. **newliver666/apk-reverse** — 3.9 · Cooling · Security · Python · +0 stars today, ≈ 54 by evening
   An Agent Skill for Android APK reverse engineering: unpacking, ad removal, dex patching, repacking, and runtime/server analysis. Loaded by an agent (Claude Code, Codex) while it works.
   Full card: https://gitnova.dev/en/r/newliver666/apk-reverse.md

---

Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score.
Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast.
Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself.
Data as of 2026-09-25 02:11 UTC, updated every 30 minutes.