S
shim-cli (GetSHIM)
See what your coding agent sends. Mask what you can.
Open source · Apache-2.0v1.2.1Local-first · no account or API keySupports Claude Code, Codex, Copilot CLI & VS CodemacOS & Linux
Opportunity score
59/100
A timely developer security wedge with strong onboarding and real risk, but weak standalone monetization and high competitive pressure limit the overall opportunity.
Founder verdict
MAYBE
A timely privacy utility for AI coding agents with a developer-friendly wedge, but unproven as a standalone business.
What is shim-cli (GetSHIM)?
shim-cli is an Apache-2.0 open source CLI that runs locally next to coding agents such as Claude Code, Codex, Copilot CLI, and VS Code. It detects secrets, emails, IBANs, DB URIs, and other personal data in what the agent would send to the model, masks them where the client allows, and provides audit and watch commands to show past leakage and session cost. The product is privacy-focused with no account, API key, or network calls to shim. Its landing page emphasizes a one-minute install, demo-before-install, dry-run safety, and agent-friendly setup instructions. No public revenue, growth, or team data is available, so its business model remains unclear.
Get the full shim-cli (GetSHIM) playbook
The complete reverse-engineering — what to copy, what to avoid, and exactly what to build instead.
- Full opportunity score across 8 dimensions
- The real problem & why customers pay
- Why it's winning — with evidence
- Complete business reverse-engineering
- Competitive advantages & moat analysis
- Weaknesses, risks & what to avoid
- Clone strategy — what to build instead
- Week-by-week MVP roadmap
- Recommended technical stack
- Founder verdict & highest-leverage move