drop agent run log · audit credential usage + leakage risk · runs locally
agent run log · credential audit · local only
heuristic screener · vendor schema varies · not definitive proof