SessionTrail

Conalh/SessionTrail

★ 0 stars TypeScript 💻 Code/Dev Tools Updated 1d ago

Local-only CLI and GitHub Action that audits Cursor / Claude Code / Codex session transcripts for risky agent runtime behavior — credential reads, curl|sh, unknown MCP servers, scope escapes.

View on GitHub → Try with Claude — $10 free →

Quick Install

Copy the config for your editor. Some servers may need additional setup — check the README.

Add to claude_desktop_config.json:

{
  "mcpServers": {
    "sessiontrail": {
      "command": "npx",
      "args": [
        "-y",
        "Conalh/SessionTrail"
      ]
    }
  }
}

README Excerpt

**A transcript behavior reviewer for AI-agent sessions.** SessionTrail reads Cursor, Claude Code, and Codex JSONL transcripts and flags what the agent actually tried to do: credential reads, `curl | sh`, unknown MCP servers, cross-session snooping, network requests, and writes outside the repo. Prompts and PR diffs only show intent and output. The transcript shows runtime behavior. SessionTrail turns that local JSONL trail into a structured report you can review, gate, or merge with the rest of

Tools (2)

cwdtext

Topics

agent-governanceai-agentsgithub-actionmcpstatic-analysissupply-chain-security

SessionTrail

Quick Install

README Excerpt

Tools (2)

Topics

Related Code/Dev Tools Servers