BakeLens/crust

About

Your agents should never (try to) read your secrets.

Crust is a transparent, local gateway between your AI agents and LLM providers. It intercepts every tool call — file reads, shell commands, network requests — and blocks dangerous actions before they execute. No code changes required.

100% local. Your data never leaves your machine.

Crust has five entry points — use one or combine them:

All entry points apply the same evaluation pipeline — self-protection, input sanitization, Unicode normalization, obfuscation detection, DLP secret scanning, path normalization, symlink resolution, and rule matching — each step in microseconds.

All activity is logged locally to encrypted storage.…

Excerpted from github.com/BakeLens/crust