AI coding agents are exfiltrating your data and no one's talking about it

[qo-roj]

Recently I stumbled over a podcast and learned about Omarchy. Interesting enough but in my eyes there is a crucial part missing.

Every AI coding agent integration discussed here (Claude Code, Codex, Hermes, Grok CLI, Gemini CLI) reads your files, logs, configs, shell history, SSH keys, and API tokens, then ships all of it to cloud LLM providers on every request.

Omarchy ships and integrates these agents. There's no data protection layer between them and the cloud. Nobody in this discussions section has raised it, and no agent harness ships with one either.

I've been building Tidebreak (https://github.com/qo-roj/tidebreak) to fix this — a local redaction proxy (Go, single binary) that:

• Intercepts every LLM API call before it leaves your machine
• Classifies content into tiers: public / redacted / local-only / blocked
• Redacts IPs, emails, API keys, private keys, MAC addresses, JWTs, PII
• Routes sensitive content to a local Ollama instance, scrubbed content to cloud
• Logs every call so you can audit what actually left your machine

Agent ──▶️ Tidebreak (localhost:8842) ──▶️ ┌── Cloud API (scrubbed)
└── Local Ollama (full data)

My suggestion: Omarchy should either ship a redaction proxy by default or at minimum document the risk and point users to a solution. Right now people are installing coding agents that have full filesystem access and zero data safeguards, and the community is asking for more agents without questioning what those agents send to third-party servers.

The repo is MIT licensed, contributions welcome. I'd rather this be a community effort than a single-vendor thing.

[techistory]

Naive question... As a new Omarchy user - if I never use any of its AI features - is my data safe? Or do any Omarchy AI agents silently do any unsolicited AI shenanigans in the background?

[qo-roj]

Educated guess: I'd say yes but where is the point to use Omarchy without any AI features?
Just give tidebreak a try and see for yourself.