Safe Send

Safe Send prevents accidental leakage of sensitive data when copying code to AI tools. It scans for secrets (API keys, passwords, tokens) and sanitizes them before they reach your clipboard.

🚀 Quick Start

1. Install from VS Code Extensions (Ctrl+Shift+X → Search "Safe Send")
2. Select code in your editor
3. Right-click → "Safe Send: Scan & Copy for AI"
4. Review results → Copy safely!

🔍 What It Does

Detects 9 Types of Secrets

Risk Levels

• 🟢 LOW (0-29): No warning (emails, IPs)
• 🟡 MEDIUM (30-59): Warning (passwords)
• 🔴 HIGH (60-100): Warning (API keys, tokens)

💻 Usage Examples

Example 1: Clean Code → Auto Copy

// Before: No secrets detected
const greeting = "Hello World";

✅ Result: Copied automatically (no warning)

Example 2: Secret Detected → Warning

// Before: Contains API key
const apiKey = "sk-1234567890abcdef";

⚠️ Dialog appears:

• Risk: 60/100 (HIGH)
• Detected: OpenAI API key
• Options: Sanitize & Copy | Copy Anyway | Cancel

✅ After Sanitizing:

const apiKey = "<API_KEY>";

Example 3: Multiple Secrets

// Before: Multiple secrets
const config = {
  apiKey: "sk-1234567890",
  password: "secret123",
  email: "admin@company.com"
};

⚠️ Risk: 100/100 (HIGH - maximum)

✅ After:

const config = {
  apiKey: "<API_KEY>",
  password: "<SECRET>",
  email: "<EMAIL>"
};

📸 Screenshots

See SCREENSHOTS.md for visual examples of:

1. ✅ Clean code copy (no secrets)
2. ⚠️ Single secret warning
3. ⚠️ Multiple secrets warning
4. 🧼 Sanitized output
5. 🔒 Status bar indicators
6. ⚙️ Settings configuration
7. 📋 Ignore for file feature
8. 📋 Clipboard monitoring
9. 📂 Path-based risk adjustment
10. 🎨 Command palette access

⚙️ Configuration

Custom Patterns

Add your own detectors in VS Code Settings:

{
  "safeSend.customPatterns": [
    {
      "id": "company_key",
      "label": "Company Key",
      "regex": "COMPANY_[A-Z0-9]{24}",
      "placeholder": "<COMPANY_KEY>",
      "riskScore": 60,
      "critical": true
    }
  ]
}

Repository Config

Create .safe-send.json in your project:

{
  "patterns": [
    {
      "id": "internal_token",
      "label": "Internal Token",
      "regex": "INTERNAL_[A-Z0-9]{32}"
    }
  ]
}

🛠️ Commands

🔄 Clipboard Monitoring

Safe Send automatically monitors your clipboard:

• ✅ Scans every 200ms
• ✅ Warns for MEDIUM/HIGH risk
• ✅ Ignores LOW risk (emails, IPs)
• ✅ Never blocks clipboard

Disable in Settings: safeSend.clipboard.monitor

📊 Quality Metrics

🚀 Quick Commands

# Install locally
npm run install:local

# Remove local install
npm run remove:local

# Run tests
npm test

# Build
pnpm run build

🔒 Safety & Privacy

• ✅ No data collection
• ✅ No network access
• ✅ 100% offline
• ✅ Open source (MIT)
• ✅ Max 200KB file size

📚 Documentation

• Architecture - Technical design
• Test Scenarios - 100+ examples
• User Guide - Testing instructions
• QA System - Autonomous testing

💻 Development

# Setup
git clone https://github.com/chaluvadis/safe-send-to-ai.git
cd safe-to-send
pnpm install
pnpm run dev:setup