Remote script. The one-line installer downloads and runs a script from GitHub, and the README notes that the checksum only detects corrupted downloads, not a compromised publisher.
Who it is forA developer running Codex CLI on a Mac who wants to know whether their agent sent personal data or secrets out during a session.
The problemAgent sessions call tools and send context to models, and there is no visible record of what was disclosed.
The outcomeA per-session HUD that shows confirmed points, distinct disclosures, confirmed recipients and denials issued, with a percentage only when the recorded evidence supports it.
What you need first
- macOS on Apple Silicon or Intel (Linux and Windows are not packaged)
- Codex CLI installed and signed in, with `codex --version` printing a version
- Python 3.11 or newer on your PATH
- About 3 GB of disk if you want name and address detection
Steps
- Run
codex --versionand confirm it prints a version such as codex-cli 0.154.0. - Run
python3 --versionand confirm Python is 3.11 or newer. - Run
curl -fsSL https://raw.githubusercontent.com/inin-zou/codex-privacy-hud/main/install.sh | shto install the plugin. - Start a new Codex session and open the Privacy HUD readings for it.
- Check that the reading shows confirmed points and unresolved actions as separate items, and that a missing percentage is shown as unavailable rather than 0%.
Prompt for your agent
Using the repo inin-zou/codex-privacy-hud, install the plugin on this macOS machine and open the Privacy HUD for the session <session-id>. Report confirmed points, distinct disclosures, confirmed recipients, denials issued and whether a percentage is shown. Verify the session began from a genuine SessionStart before treating its accounting as evidence-based.
Caveat. Detection is heuristic, sessions are not monitored while the model loads, and hosted tools bypass hooks, so a zero reading does not mean no disclosure occurred.
Use this in your AI agent
Ask your agent
Using the Deduped MCP, get the setup steps for inin-zou/codex-privacy-hud and "See what a Codex session discloses, live"
Add Deduped to Claude Code once
claude mcp add --transport http deduped https://dedupedai.com/mcp
Every Monday: the 5 hottest repos and exactly how to use them. Free, one email a week, unsubscribe anytime.
Get them freeShare: X LinkedIn Hacker News Email Copy link
Third-party repos we don't own. AI-written use cases can be wrong. Disclaimer