This tool reads local Codex and Claude Code session JSONL. Source files and exports may contain conversation text, source code, paths, reasoning, tool calls, command output, attachments, and credentials. Treat them as confidential.

The default extractor is local-only and conservative: no network requests or telemetry; reasoning, tool input, tool output, attachments, developer messages, and paths are opt in; queue and auxiliary content is not copied; inventory exposes schema only; discovery rejects symlinks and root escapes; and limits bound resource use. These controls do not make an export safe to publish. Review every export, especially with any opt-in field. POSIX output files use mode 0600; Windows output relies on the destination ACL.

Report suspected vulnerabilities privately through the repository security contact. Use synthetic data in reports. Never attach real sessions, secrets, personal paths, proprietary source, or credentials. Include affected version, impact, reproduction, and suggested mitigation when possible.

Contributors must keep source sessions outside the repository, use synthetic fixtures, inspect staged diffs, and remove sensitive values from logs and reports.