What your AI agents can do on your machine.
RosmarOps reads Claude Code's configuration and draws an exposure map: what it can read and change, which keys it can reach, and whether it can touch another agent's configuration. Everything is computed on your computer.
What it doesn't do
- It doesn't connect to the internet.
- It doesn't send anything to anyone, not even if you want it to: it has no feature that sends data.
- It doesn't change anything on your machine; it only writes its own reports to its own folder.
What you get
- A traffic light.
- "If you do only one thing today": the exact file and change, and how much your score would rise if you make it.
- An Agent Posture Score out of 100 for each agent, always calculated with the same formula.
- What wasn't read doesn't count as clean.
- RosmarOps suggests; you make the change.
Where it stands
Today it evaluates Claude Code on Windows. Cursor and Cline are detected but don't have a score yet.
It can't be downloaded yet. When it's released, you'll be able to check for yourself that it's authentic.