Agent Blast Radius

See which local credentials an agent running as your user could encounter. Get an offline exposure summary, a shareable portrait card, and suggested text to copy.

Run once

Requires Node.js 22 or newer, on macOS or Linux (Apple Silicon/ARM64 or AMD64).

npx -y @kloudle/[email protected]

Explicitly running this command downloads a checksum-verified executable and runs an offline check. The default scan also creates a 1080 × 1350 PNG and suggested share text in the current directory. PNG generation is built into the binary; no image conversion package is required. The card title is “'s agent blast radius” using your system username. Check the image and text before sharing on Instagram, LinkedIn, or X: your username is personal information.

The username comes from your system account, not inherited USER or LOGNAME values. If account lookup fails or takes longer than 250 ms, the card is anonymous. On Linux, the account must appear in a bounded /etc/passwd lookup. Characters unsupported by the embedded font become spaced U+XXXX labels in both PNG and SVG cards. The displayed owner is limited to 60 Unicode characters, including ... when truncated; sharing text retains the original sanitized username.

npx -y @kloudle/[email protected] --anonymous
npx -y @kloudle/[email protected] --no-card
npx -y @kloudle/[email protected] --help

--anonymous omits your username from the card. --no-card suppresses the default card and share-text files. Existing output files are not overwritten. Installing the npm package alone has no install hooks, binary downloads, or scans; a scan happens only when you explicitly invoke its command. The one-liner is an invocation, not just an installation.

The PNG and text are published as separate complete files with owner-only permissions. If the text cannot be created (for example, its destination already exists), the command reports failure and a completed PNG may remain. Existing text is preserved; the pair is not an all-or-nothing transaction.

Privacy and scope

The free executable checks offline only. It does not validate tokens against providers, prove administrator access, upload findings, or include telemetry. Scores are exposure heuristics, not proof that an attacker can use an account. Only inspect systems and files you own or are authorized to assess.

Package installation and the initial binary download contact npm and GitHub; those services can observe the download request and IP address. No discovered credentials are sent to them. Once cached, the launcher verifies the binary locally before running it without fetching the binary again. npx itself may still contact npm on later invocations; the scanner's checks remain offline.

Pro's fully opt-in online checks and Pro Max's fleet capabilities are planned, not included in this release. A separate hosted challenge allowance of 10 checks per IP is planned; its period and paid price remain undecided. This offline executable does not enforce an IP quota or charge for scans.

Download verification

The launcher downloads the matching platform binary from a versioned GitHub release URL pinned in this npm package, verifies its embedded SHA-256, caches it under ~/.cache/agent-blast-radius, and rechecks the digest each run. Arguments are forwarded literally without a shell. It never executes MCP server configurations.

There are no runtime URL, checksum, or release-owner overrides. HTTPS downloads are bounded to 64 MiB, 30 seconds, and three redirects among approved GitHub release hosts. No credentials are sent in request headers. Cache directories and binaries must be owned by you, non-symlinked, and not group/world writable. Invalid caches fail closed and are not silently replaced. Completed cache directories are published atomically for concurrent launches; abandoned install-* directories are ignored rather than automatically removed.

These checks protect against transport corruption and other-user cache tampering, not a compromised npm account, a malicious published manifest, or a hostile process already controlling your user account. A release without platform assets fails closed before networking.

This initial release is unsigned and is not notarized by Apple. SHA-256 checking verifies integrity against the published manifest, not an independent signing identity. Your operating system may show a security warning or block execution.

License and support

Proprietary software, not open source. The public repository contains downloads and user documentation; scanner source is private. See LICENSE.txt and the third-party notices accompanying the release.

Downloads and documentation · Report an issue

Do not put credentials or unredacted scan output in public issues.