Radar #6

Jul 27 – Aug 2, 2026 · Published Jul 27, 2026, 10:16 AM UTC

Fleet snapshot

Anonymous counts across all complete scans this week. No repository names are shown.

497 repositories were scanned for AI-context hygiene.

1091 AI-context risk signals matched 28 sensitive path categories.

1% of scanned repos use a dedicated AI exclude file (4 types in use).

How to read this report

These are not confirmed leaks.

Radar uses path-level checks to detect files and folders that may become visible to AI coding tools if they are not covered by AI-specific ignore rules.

A risk signal is a file committed to the repository whose path matches a sensitive category (for example .env or *.pem). Counts are file matches at the path level — Radar never opens the files.

  • No file contents were read.
  • No secrets were collected.
  • No repository names are published without opt-in.
  • Repositories are a manually curated cohort, not a random sample — read these as directional signals, not population-level statistics.

Scanned

497
repos in this week's stats

AI-context risk signals

1091
sensitive path matches

Repos with risk signals

33%
162 of 497 repos

AI exclude-file coverage

1%
repos with a dedicated AI exclude file
Scan details
Targeted
500
Scanned
497
Scan complete
497
Skipped
0
Errors
3
Repos with risk signals
162
Generated
Jul 27, 2026, 10:16 AM UTC
Tool version
0.19.0–0.19.0
Ruleset
e634955c141dcfc6

Main takeaway

33% of scanned repos had AI-context risk signals — mostly lower-severity path categories.

Far fewer repos use a dedicated AI exclude file (1%) than show risk signals (33%). Start by excluding Environment files (.env) and npm credentials (.npmrc) from AI context.

AI-context risk signal categories

Aggregated path pattern counts — not tied to any named repository.

  • Environment files (.env)Required64 repos · 206 matches
  • Key material (.pem, .key)Required23 repos · 113 matches
  • Secrets YamlRequired12 repos · 25 matches
  • Key FilesRequired10 repos · 15 matches
  • Credentials JsonRequired1 repo · 1 match
  • Keepass DatabasesRequired1 repo · 1 match
  • Kubernetes configRequired1 repo · 1 match
  • npm credentials (.npmrc)Recommended38 repos · 91 matches
  • Terraform VarsRecommended12 repos · 68 matches
  • Terraform StateRecommended4 repos · 42 matches
  • Yarn ConfigRecommended8 repos · 13 matches
  • Ssh FilesRecommended3 repos · 12 matches
  • Pgp KeysRecommended5 repos · 10 matches
  • GCP credential filesRecommended2 repos · 7 matches
  • Android KeystoreRecommended4 repos · 4 matches
  • Apple P8 KeysRecommended2 repos · 4 matches
  • Apple ProvisioningRecommended1 repo · 4 matches
  • Pkcs12 PfxRecommended3 repos · 4 matches
  • Firebase Client ConfigRecommended3 repos · 3 matches
  • Auth JsonRecommended1 repo · 2 matches
  • Pkcs12 P12Recommended2 repos · 2 matches
  • Android Local PropertiesRecommended1 repo · 1 match
  • Log FilesInfo34 repos · 388 matches
  • Data ExportsInfo3 repos · 51 matches
  • Backup FilesInfo8 repos · 10 matches
  • Local DatabasesInfo6 repos · 9 matches
  • Shell HistoryInfo2 repos · 3 matches
  • Db DumpsInfo1 repo · 1 match

AI exclude files

1% of repos use a dedicated AI exclude file

These actually keep matching files out of AI context — and they are still rare.

.cursorignore
0%
.claudeignore
0%
.aiexclude
0%
.geminiignore
0%
.copilotignore
0%
.llmignore
0%
Show 9 more exclude file types (4 in use overall)
.clineignore
0%
.cursorindexingignore
0%
.aiderignore
0%
Claude Project Rules
0%
.codeiumignore
0%
.codyignore
0%
.continueignore
0%
.rooignore
0%
.zedignore
0%

AI context files

24% of repos ship an AI context file

Files like AGENTS.md and CLAUDE.md give AI tools project instructions — theyadd context, they do not exclude anything. They are not a substitute for an exclude file.

AGENTS.md
19%
CLAUDE.md
16%
Cursor project rules
0%

Fix the top risks

Patterns covering this week's most widespread categories (Environment files (.env), npm credentials (.npmrc), Certificates and PEM keys (.pem), Terraform variable files (.tfvars)). Add them to a dedicated AI exclude file (for example .cursorignore or.claudeignore) — and to .gitignore so the files are never committed.

AI exclude rules
.env
.env.*
!.env.example
.npmrc
*.pem
*.key
certs/
*.tfvars
!example.tfvars
*.tfstate
*.tfstate.*

Per-category guidance lives in the risk pattern guides.

Compared with previous report

MetricRadar #5Radar #6
Repositories scanned499497
AI exclude-file coverage1%1%
Repos with risk signals33%33%
AI-context risk signals (absolute)11471091
Risk signals per scanned repo2.32.2
Top categoryKey material (.pem, .key)Log Files

Named participants

Per-repository reports for maintainers who opted in. Fleet counts above stay anonymous; each card below is that repo's own scan.

No named listings this week. Maintainers can opt in via radar registry.

View all-time participants →

Check your own project

162 of 497 repos this week exposed sensitive paths to AI tools. Check yours in seconds:

Run the same local check with Offsend CLI:

brew install --cask offsend/tap/offsend-cli
offsend show
offsend prepare --dry-run

Everything runs locally. No file contents are uploaded.

Scan with Offsend CheckLearn more about Offsend →