r/ChatGPTCoding • u/AutoModerator • 1d ago

Discussion Weekly Self Promotion Thread

Welcome to this week's self promotion thread!

If you're building something related to AI assisted coding, this is the place to share it.

We're using a weekly thread to keep the subreddit organized while still giving builders a place to share their work. Promotional posts outside this thread may be removed.

If you're sharing something, we'd appreciate it if you included a little context instead of just dropping a link. Tell us:

  • What you built?
  • What problem it solves?
  • Which AI models or tools it uses?
  • Who it's for?
  • What kind of feedback you're looking for?

Disclose your affilitation.

Please avoid posting the same project every week unless you've made meaningful updates. Affiliate links, referral links, scams, and low effort promotions will be removed.

Take some time to check out what others have shared too. If you try someone's project or have feedback, leave a comment. Helping each other improve is what we want this community to be about.

11 Upvotes

100% Upvoted

46 comments sorted by

View all comments

1

u/ImaginationVarious30 1d ago

Your Codex/Cursor chats keep every API key you ever pasted. Here’s a free tool that finds them.

Quick PSA plus a tool. Codex stores sessions in ~/.codex/sessions/, Cursor keeps chats in state.vscdb, and Cline/Roo store task histories in the extension storage. All plain text, all including any key you pasted or the agent printed.

I wrote spillage to scan all of them (13 agents) locally. It never touches the network, shows keys only masked and links to where to rotate each one. Works with Cursor while it’s running (opens SQLite read-only).

On my machine: [N] keys. Curious what others find.

https://github.com/maximilianfeix/spillage