Cloak – .env on disk has fakes, your editor shows them (CLI and VSCode)

Show HN: Cloak – .env on disk has fakes, your editor shows them (CLI and VSCode)

Cloak – .env on disk has fakes, your editor shows them (CLI and VSCode) is a business in show hn launch.

Profile

I run AI coding agents with full filesystem access daily — Claude Code, Cursor, the works. Last month I realized every one of them has been reading my .env files with real Stripe live keys, database passwords, and AWS credentials. Sent straight to model providers as "context." .gitignore protects git, not disk. Secret managers protect servers, not laptops. Sandboxing the agent kills its usefulness. Nothing stopped a local cat .env from returning real credentials. So I built Cloak. The .env on disk always contains structurally valid fakes — sk_test_ for Stripe, localhost for databases, AWS example keys. Agents read the file, get sandbox values, write perfectly valid code. The VS Code/Cursor e

Its activity falls under show hn launch; the profile below is assembled from public directory data.

Its current recorded stage is Show HN launch.

Website: getcloak.dev