Show HN: Ghbrk – Let AI agents run Git/gh without exposing SSH keys/API tokens
Ghbrk is a tool that allows AI agents to execute Git and GitHub CLI commands without directly exposing SSH keys or API tokens, adding a security layer for automated workflows.
Background
- Ghbrk is an open-source tool that lets AI agents (e.g., Cursor, Copilot coding agents) execute Git and GitHub CLI commands (git push, gh pr create) without handing over the agent's own SSH keys or personal access tokens.
- It works by setting up a lightweight proxy server on the user's machine: the agent talks to the local proxy, which authenticates using the user's existing credentials and forwards only the command output back to the agent.
- The key problem it solves: AI coding agents today often need direct write access to repositories. Giving them an API token or SSH key means they can do anything the key allows—risking malicious or accidental damage. Ghbrk lets the user review, approve, or reject each command before it runs, keeping the agent on a short leash.
- The name stands for "GitHub Broker." It builds on earlier "agent-in-the-loop" security ideas, treating the AI as an untrusted contributor that should be sandboxed like any third-party automation.