Show HN: Keep your credentials out of the AI agents you use and build

Weir is a tool that detects when AI agents leak API keys by planting unique fake keys where real ones live, running the agent's own flows against a local fake model, and searching spans, logs, console output, model prompts and other services for those exact values. It also offers a Claude Code status line and optional redaction hook that count and strip inventoried real keys before the model reads tool results. The author reports it found CVE-2026-116691 (GHSA-j7qq-vr8c-xvw3) in MLflow, fixed in 3.17.0.