What your AI agents can do on your machine.
RosmarOps reads Claude Code's configuration and draws an exposure map: what it can read and change, which keys it can reach, and whether it can touch another agent's configuration. Everything is computed on your computer.
What it doesn't do
- It doesn't connect to the internet.
- It doesn't send anything to anyone, not even if you want it to: it has no feature that sends data.
- It doesn't change anything on your machine; it only writes its own reports to its own folder.
What you get
- A traffic light.
- "If you do only one thing today": the exact file and change, and how much your score would rise if you make it.
- An Agent Posture Score out of 100 for each agent, always calculated with the same formula.
- What wasn't read doesn't count as clean.
- RosmarOps suggests; you make the change.
Where it stands
Today it evaluates Claude Code and Cursor on Windows. It detects Cline, but doesn't score it yet.
It can't be downloaded yet. When it's released, you'll be able to check for yourself that it's authentic.